Windows wszystko się zacina

**Posty:** 258 · przez **DjAnarbes** 08 Lut 2010, 20:30

Witam , mianowicie problem wygląda tak że nawet jak pisze litery pojawiają się w odstępie kilku sekund aplikacje nagle stają i tylko pisze "aplikacja nie odpowiada" zdarza się to bardzo często, pomaga tylko reset kompa. Podejrzewam jakieś syfy w logu więc podaje , z góry dziękuje za pomoc.

Kod: Zaznacz wszystko: OTL logfile created on: 2010-02-08 19:33:52 - Run 1 OTL by OldTimer - Version 3.1.28.0 Folder = C:\Users\Admin\Downloads 64bit-Windows Vista Ultimate Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation Internet Explorer (Version = 7.0.6001.18000) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 58,00% Memory free 8,00 Gb Paging File | 6,00 Gb Available in Paging File | 77,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 146,98 Gb Total Space | 36,68 Gb Free Space | 24,96% Space Free | Partition Type: NTFS Drive D: | 151,11 Gb Total Space | 25,69 Gb Free Space | 17,00% Space Free | Partition Type: NTFS Drive E: | 353,87 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: HARDCORE4 Current User Name: Admin Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010-02-08 19:33:43 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Users\Admin\Downloads\OTL.exe PRC - [2010-02-08 19:22:11 | 000,396,288 | ---- | M] (Trend Micro Inc.) -- C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe PRC - [2010-01-15 13:52:12 | 000,307,672 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2009-12-23 17:14:30 | 014,100,888 | ---- | M] (Redefine Sp z o.o.) -- C:\Program Files (x86)\ipla\ipla.exe PRC - [2009-12-11 14:19:39 | 000,289,584 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe PRC - [2009-10-20 19:39:28 | 000,340,456 | ---- | M] (Kaspersky Lab) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe PRC - [2009-10-12 04:40:48 | 006,045,696 | ---- | M] () -- D:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld.exe PRC - [2009-08-17 00:32:00 | 000,239,648 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2008-09-05 00:00:00 | 002,117,216 | ---- | M] (Lavalys, Inc.) -- D:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe PRC - [2007-03-06 15:43:09 | 000,435,120 | ---- | M] () -- C:\Program Files (x86)\Lexmark 3500-4500 Series\lxdimon.exe PRC - [2006-02-28 12:42:38 | 000,229,376 | ---- | M] (Apple Computer, Inc.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010-02-08 19:33:43 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Users\Admin\Downloads\OTL.exe MOD - [2010-02-08 19:03:21 | 000,109,072 | ---- | M] (Kaspersky Lab) -- C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll MOD - [2008-01-21 03:49:09 | 000,450,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll MOD - [2008-01-21 03:47:14 | 001,684,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2009-08-13 17:54:41 | 000,507,136 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\TuneUpDefragService.exe -- (TuneUp.Defrag) SRV:[b]64bit:[/b] - [2008-07-18 14:05:40 | 000,035,072 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\uxtuneup.dll -- (UxTuneUp) SRV:[b]64bit:[/b] - [2008-01-21 03:51:22 | 000,252,928 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService) SRV:[b]64bit:[/b] - [2008-01-21 03:51:03 | 000,598,016 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService) SRV:[b]64bit:[/b] - [2008-01-21 03:50:23 | 000,195,584 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2008-01-21 03:49:28 | 000,027,648 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (usprserv) SRV:[b]64bit:[/b] - [2008-01-21 03:47:07 | 000,689,152 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\fxssvc.exe -- (Fax) SRV:[b]64bit:[/b] - [2008-01-21 03:46:39 | 000,383,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2008-01-21 03:46:36 | 001,147,904 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\wbengine.exe -- (wbengine) SRV:[b]64bit:[/b] - [2007-03-06 15:47:49 | 000,876,976 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\lxdicoms.exe -- (lxdi_device) SRV - [2009-10-20 19:39:28 | 000,340,456 | ---- | M] (Kaspersky Lab) [Auto | Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe -- (AVP) SRV - [2009-10-12 04:40:48 | 006,045,696 | ---- | M] () [Auto | Running] -- D:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld.exe -- (MySQL501) SRV - [2009-10-11 22:27:07 | 003,369,044 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWow64\GameMon.des -- (npggsvc) SRV - [2009-08-17 00:32:00 | 000,239,648 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2009-01-26 16:07:31 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2008-08-01 11:11:20 | 000,158,208 | ---- | M] (NVIDIA) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\System Update\UpdateCenterService.exe -- (UpdateCenterService) SRV - [2008-07-18 14:05:40 | 000,028,416 | ---- | M] (TuneUp Software GmbH) [Auto | Running] -- C:\Windows\SysWOW64\uxtuneup.dll -- (UxTuneUp) SRV - [2008-01-21 03:49:41 | 000,093,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64) SRV - [2007-09-04 19:31:22 | 000,180,224 | ---- | M] (NVIDIA) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe -- (nTuneService) SRV - [2007-08-24 06:59:20 | 000,068,464 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service) SRV - [2007-03-06 15:45:37 | 000,517,040 | ---- | M] ( ) [Auto | Running] -- C:\Windows\SysWow64\lxdicoms.exe -- (lxdi_device) SRV - [2006-11-02 14:34:14 | 000,000,000 | ---D | M] [Unknown | Stopped] -- C:\Windows\SysWOW64\Msdtc -- (MSDTC) SRV - [2006-02-28 12:42:38 | 000,229,376 | ---- | M] (Apple Computer, Inc.) [Auto | Running] -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe -- (Bonjour Service) SRV - [2005-04-04 00:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2010-02-08 19:03:21 | 000,353,296 | ---- | M] () [File_System | System | Running] -- C:\Windows\SysNative\DRIVERS\klif.sys -- (KLIF) DRV:[b]64bit:[/b] - [2010-01-13 22:38:02 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\atksgt.sys -- (atksgt) DRV:[b]64bit:[/b] - [2010-01-13 22:38:02 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\lirsgt.sys -- (lirsgt) DRV:[b]64bit:[/b] - [2009-10-14 20:18:38 | 000,040,464 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\DRIVERS\klbg.sys -- (KLBG) DRV:[b]64bit:[/b] - [2009-10-02 18:39:32 | 000,021,008 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\klmouflt.sys -- (klmouflt) DRV:[b]64bit:[/b] - [2009-09-14 13:46:42 | 000,027,152 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\klim6.sys -- (KLIM6) DRV:[b]64bit:[/b] - [2009-09-01 14:29:56 | 000,157,712 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\kl1.sys -- (kl1) DRV:[b]64bit:[/b] - [2009-01-16 22:43:36 | 000,868,848 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2008-01-21 03:51:10 | 000,161,848 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\DRIVERS\fvevol.sys -- (fvevol) DRV:[b]64bit:[/b] - [2008-01-21 03:51:03 | 000,460,800 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC) DRV:[b]64bit:[/b] - [2008-01-21 03:46:34 | 000,046,080 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb) DRV:[b]64bit:[/b] - [2007-06-07 06:42:22 | 000,106,496 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\Rtlh64.sys -- (RTL8169) DRV:[b]64bit:[/b] - [2006-11-02 06:28:10 | 000,273,920 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HdAudio.sys -- (HdAudAddService) DRV - [2009-01-03 21:45:57 | 000,000,000 | ---D | M] [Kernel | System | Running] -- C:\Windows\CSC -- (CSC) DRV - [2008-12-29 09:30:00 | 000,012,288 | ---- | M] () [Kernel | On_Demand | Stopped] -- D:\Program Files\RivaTuner v2.22\RivaTuner64.sys -- (RivaTuner64) DRV - [2008-09-05 00:00:00 | 000,021,120 | ---- | M] () [Kernel | On_Demand | Running] -- D:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.amd64 -- (EverestDriver) DRV - [2008-08-18 09:30:00 | 000,040,480 | ---- | M] (NVidia Corp.) [Kernel | On_Demand | Running] -- C:\Windows\nvoclk64.sys -- (NVR0Dev) DRV - [2008-08-01 11:08:28 | 000,040,480 | ---- | M] (NVidia Corp.) [Kernel | Auto | Running] -- C:\Windows\nvflsh64.sys -- (NVR0FLASHDev) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:9.0.0.736 FF - HKLM\software\mozilla\Mozilla Firefox 3.0.17\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-01-15 13:52:21 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.17\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-02-01 18:19:01 | 000,000,000 | ---D | M] [2009-01-16 22:34:34 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\mozilla\Extensions [2008-01-10 21:00:10 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\mozilla\Firefox\Profiles\f6j3exqg.default\extensions [2009-02-01 19:36:22 | 000,000,681 | ---- | M] () -- C:\Users\Admin\AppData\Roaming\Mozilla\FireFox\Profiles\f6j3exqg.default\searchplugins\ask.xml [2009-01-16 22:45:25 | 000,000,523 | ---- | M] () -- C:\Users\Admin\AppData\Roaming\Mozilla\FireFox\Profiles\f6j3exqg.default\searchplugins\daemon-search.xml [2010-02-08 18:35:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions [2010-02-08 18:35:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions\linkfilter@kaspersky.ru [2010-01-15 13:52:14 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2010-01-15 13:52:14 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2010-01-15 13:52:14 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2010-01-15 13:52:14 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2010-01-15 13:52:14 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2010-01-15 13:52:14 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-11-10 19:13:20 | 000,000,770 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 192.168.0.100 l2authd.lineage2.com O1 - Hosts: 192.168.0.100 l2testauthd.lineage2.com O2:[b]64bit:[/b] - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\x64\ievkbd.dll (Kaspersky Lab) O2:[b]64bit:[/b] - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\x64\klwtbbho.dll (Kaspersky Lab) O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\ievkbd.dll (Kaspersky Lab) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No CLSID value found. O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll (Kaspersky Lab) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found O3:[b]64bit:[/b] - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found O4:[b]64bit:[/b] - HKLM..\Run: [lxdimon.exe] C:\Program Files (x86)\Lexmark 3500-4500 Series\lxdimon.exe () O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Windows\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [Skytel] C:\Windows\SkyTel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [Adobe ARM] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe (Kaspersky Lab) O4 - HKCU..\Run: [IPLA!] C:\Program Files (x86)\ipla\ipla.exe (Redefine Sp z o.o.) O4 - HKCU..\Run: [NVIDIA nTune] C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneCmd.exe (NVIDIA) O4 - HKCU..\RunOnce: [EVEREST AutoStart] D:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe (Lavalys, Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O9:[b]64bit:[/b] - Extra Button: &Wirtualna klawiatura - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\x64\klwtbbho.dll (Kaspersky Lab) O9:[b]64bit:[/b] - Extra Button: &Sprawdzanie adresów - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\x64\klwtbbho.dll (Kaspersky Lab) O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: &Wirtualna klawiatura - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll (Kaspersky Lab) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: &Sprawdzanie adresów - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll (Kaspersky Lab) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll (Kaspersky Lab) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - Winlogon\Notify\klogon: DllName - Reg Error: Key error. - C:\Windows\SysNative\klogon.dll () O24 - Desktop WallPaper: C:\Users\Admin\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O24 - Desktop BackupWallPaper: C:\Users\Admin\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008-12-04 10:44:59 | 000,000,000 | ---- | M] () - D:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2008-03-28 05:46:58 | 000,000,000 | ---D | M] - E:\AUTORUN -- [ CDFS ] O32 - AutoRun File - [2004-09-27 04:24:38 | 000,000,041 | R--- | M] () - E:\AUTORUN.INF -- [ CDFS ] O33 - MountPoints2\{6dd8147a-e019-11de-bc9e-001c2569d9df}\Shell\Open(&0)\command - "" = G:\Recycled\ctfmon.exe -- File not found O33 - MountPoints2\{88e8f99a-ec4a-11dd-9142-001c2569d9df}\Shell\Open(&0)\command - "" = G:\Recycled\ctfmon.exe -- File not found O33 - MountPoints2\{dbd216b8-e416-11dd-8b9f-001c2569d9df}\Shell - "" = AutoRun O33 - MountPoints2\{dbd216b8-e416-11dd-8b9f-001c2569d9df}\Shell\AutoRun\command - "" = F:\SETUP.EXE -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found [b]64bit:[/b] O35 - comfile [open] -- "%1" %* File not found [b]64bit:[/b] O35 - exefile [open] -- "%1" %* File not found O35 - comfile [open] -- "%1" %* O35 - exefile [open] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010-02-08 19:22:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Trend Micro [2010-02-08 18:33:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab [2010-02-08 18:33:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Kaspersky Lab [2010-02-08 18:28:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab Setup Files [2010-02-08 18:27:55 | 000,000,000 | ---D | C] -- C:\Star Wars The Force Unleashed Ultimate Sith Edition [PL] [2010-02-08 14:45:31 | 000,000,000 | ---D | C] -- C:\WARHAMMER [2010-02-07 18:31:06 | 000,000,000 | ---D | C] -- C:\Warhammer.40.000.Dawn.of.War.II-ViTALiTY [2010-02-07 17:49:39 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\S.T.A.L.K.E.R. - Zew Prypeci [2010-02-07 17:41:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GSC World Publishing [2010-02-07 16:26:19 | 000,000,000 | R--D | C] -- C:\Users\Admin\Desktop\HydroPRO_Icon_Pack [2010-02-07 15:48:50 | 000,000,000 | R--D | C] -- C:\Users\Admin\Desktop\Programy [2010-02-07 15:48:21 | 000,000,000 | R--D | C] -- C:\Users\Admin\Desktop\Gry [2010-02-07 13:46:41 | 000,000,000 | ---D | C] -- C:\STALKER ZP PL [2010-02-04 19:01:41 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Leadertech [2010-02-04 18:53:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CAPCOM [2010-02-01 18:19:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BitTorrent [2010-01-31 17:10:13 | 000,000,000 | R--D | C] -- C:\Users\Admin\Desktop\wtyczki [2010-01-31 17:04:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ASIO4ALL v2 [2010-01-31 17:04:34 | 000,225,280 | ---- | C] (Propellerhead Software AB) -- C:\Windows\SysWow64\rewire.dll [2010-01-31 17:04:32 | 000,000,000 | ---D | C] -- C:\Users\Admin\Documents\Image-Line [2010-01-31 17:04:26 | 001,554,944 | ---- | C] (HMS http://hp.vector.co.jp/authors/VA012897/) -- C:\Windows\SysWow64\vorbis.acm [2010-01-31 17:04:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VstPlugins [2010-01-31 17:04:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Outsim [2010-01-31 17:01:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Image-Line [2010-01-31 16:59:52 | 000,000,000 | ---D | C] -- C:\Image.Line.Fruity.Loops.9.XXL [2010-01-30 12:56:47 | 000,000,000 | ---D | C] -- C:\Users\Admin\Documents\BioWare [2010-01-30 12:26:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\BioWare [2010-01-30 12:12:00 | 000,000,000 | ---D | C] -- C:\Mass.Effect.2.MULTi3-PROPHET [2010-01-17 15:42:00 | 000,000,000 | ---D | C] -- C:\Windows\DD1865F0AD7340FBB23E1822E02396FF.TMP [2010-01-17 15:41:57 | 000,000,000 | ---D | C] -- C:\Windows\A7E07C2B2220441587E3784D5814BC93.TMP [2010-01-17 15:20:43 | 000,000,000 | ---D | C] -- C:\Users\Admin\Deskop [2010-01-17 12:49:15 | 000,000,000 | ---D | C] -- C:\Users\Admin\Documents\The Witcher [2010-01-17 12:49:15 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\The Witcher [2010-01-17 12:30:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Wiedźmin Edycja Rozszerzona [2010-01-17 12:26:39 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\The Witcher [2010-01-15 13:51:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Solidshield [2010-01-14 00:14:07 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\EventProviders [2010-01-13 22:56:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Synetic [2010-01-13 22:38:02 | 000,000,000 | ---D | C] -- C:\Windows\1C4551A64743409391E41477CD655043.TMP [2009-02-22 19:15:41 | 000,614,400 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdipmui.dll [2009-02-22 19:15:41 | 000,356,352 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdiinpa.dll [2009-02-22 19:15:41 | 000,339,968 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdiiesc.dll [2009-02-22 19:15:40 | 001,187,840 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdiserv.dll [2009-02-22 19:15:40 | 000,942,080 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdiusb1.dll [2009-02-22 19:15:40 | 000,761,856 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdicomc.dll [2009-02-22 19:15:40 | 000,671,744 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdihbn3.dll [2009-02-22 19:15:40 | 000,532,480 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdilmpm.dll [2009-02-22 19:15:40 | 000,360,448 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdicomm.dll [2009-02-22 19:15:40 | 000,053,248 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdiprox.dll [2009-02-22 19:15:40 | 000,053,248 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdipplc.dll [8 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010-02-08 19:34:23 | 004,718,592 | ---- | M] () -- C:\Users\Admin\ntuser.dat [2010-02-08 19:22:11 | 000,001,936 | ---- | M] () -- C:\Users\Admin\Desktop\HijackThis.lnk [2010-02-08 19:13:09 | 000,661,874 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2010-02-08 19:13:09 | 000,586,980 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010-02-08 19:13:09 | 000,126,702 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2010-02-08 19:13:09 | 000,101,052 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010-02-08 19:13:08 | 001,469,036 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010-02-08 19:07:02 | 000,152,476 | ---- | M] () -- C:\ProgramData\nvModes.dat [2010-02-08 19:07:02 | 000,152,476 | ---- | M] () -- C:\ProgramData\nvModes.001 [2010-02-08 19:06:52 | 000,000,552 | ---- | M] () -- C:\Windows\tasks\Konserwacja jednym kliknięciem.job [2010-02-08 19:06:45 | 000,004,784 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2010-02-08 19:06:45 | 000,004,784 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2010-02-08 19:06:43 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010-02-08 19:06:41 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-02-08 19:05:46 | 000,524,288 | -HS- | M] () -- C:\Users\Admin\ntuser.dat{dacd8a26-10c7-11df-904b-001c2569d9df}.TMContainer00000000000000000001.regtrans-ms [2010-02-08 19:05:46 | 000,065,536 | -HS- | M] () -- C:\Users\Admin\ntuser.dat{dacd8a26-10c7-11df-904b-001c2569d9df}.TM.blf [2010-02-08 19:05:40 | 003,518,385 | -H-- | M] () -- C:\Users\Admin\AppData\Local\IconCache.db [2010-02-08 19:03:21 | 000,353,296 | ---- | M] () -- C:\Windows\SysNative\drivers\klif.sys [2010-02-08 18:43:26 | 000,000,379 | ---- | M] () -- C:\Users\Admin\Dokumenty — skrót.lnk [2010-02-08 18:34:54 | 000,143,387 | ---- | M] () -- C:\Windows\SysNative\drivers\klin.dat [2010-02-08 18:34:54 | 000,104,987 | ---- | M] () -- C:\Windows\SysNative\drivers\klick.dat [2010-02-07 17:50:11 | 000,002,253 | ---- | M] () -- C:\Users\Public\Desktop\S.T.A.L.K.E.R. - Zew Prypeci.lnk [2010-02-07 17:50:02 | 000,001,702 | ---- | M] () -- C:\Users\Admin\Desktop\µTorrent.lnk [2010-02-07 14:21:44 | 000,148,737 | ---- | M] () -- C:\Users\Admin\Desktop\Bez tytułu.jpg [2010-02-04 21:12:31 | 006,411,525 | ---- | M] () -- C:\Users\Admin\Desktop\va - the ones that get away (dejan gruevski's afterlove mix).mp3 [2010-02-04 20:40:37 | 000,076,288 | ---- | M] () -- C:\Users\Admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-02-03 14:32:25 | 000,524,288 | -HS- | M] () -- C:\Users\Admin\ntuser.dat{dacd8a26-10c7-11df-904b-001c2569d9df}.TMContainer00000000000000000002.regtrans-ms [2010-02-01 18:19:07 | 000,000,225 | ---- | M] () -- C:\Windows\wininit.ini [2010-01-27 14:31:20 | 000,524,288 | -HS- | M] () -- C:\Users\Admin\ntuser.dat{e8539efd-0048-11df-ae3d-001c2569d9df}.TMContainer00000000000000000001.regtrans-ms [2010-01-27 14:31:20 | 000,065,536 | -HS- | M] () -- C:\Users\Admin\ntuser.dat{e8539efd-0048-11df-ae3d-001c2569d9df}.TM.blf [2010-01-13 22:38:02 | 000,314,016 | ---- | M] () -- C:\Windows\SysNative\drivers\atksgt.sys [2010-01-13 22:38:02 | 000,043,680 | ---- | M] () -- C:\Windows\SysNative\drivers\lirsgt.sys [2010-01-13 14:56:07 | 000,524,288 | -HS- | M] () -- C:\Users\Admin\ntuser.dat{e8539efd-0048-11df-ae3d-001c2569d9df}.TMContainer00000000000000000002.regtrans-ms [2010-01-13 14:47:45 | 000,524,288 | -HS- | M] () -- C:\Users\Admin\NTUSER.DAT{76a5fcf7-98b8-11de-bae8-001c2569d9df}.TMContainer00000000000000000001.regtrans-ms [2010-01-13 14:47:45 | 000,065,536 | -HS- | M] () -- C:\Users\Admin\NTUSER.DAT{76a5fcf7-98b8-11de-bae8-001c2569d9df}.TM.blf [8 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-02-08 19:22:04 | 000,001,936 | ---- | C] () -- C:\Users\Admin\Desktop\HijackThis.lnk [2010-02-08 18:43:26 | 000,000,379 | ---- | C] () -- C:\Users\Admin\Dokumenty — skrót.lnk [2010-02-08 18:34:54 | 000,143,387 | ---- | C] () -- C:\Windows\SysNative\drivers\klin.dat [2010-02-08 18:34:54 | 000,104,987 | ---- | C] () -- C:\Windows\SysNative\drivers\klick.dat [2010-02-08 18:32:42 | 000,353,296 | ---- | C] () -- C:\Windows\SysNative\drivers\klif.sys [2010-02-07 17:50:11 | 000,002,253 | ---- | C] () -- C:\Users\Public\Desktop\S.T.A.L.K.E.R. - Zew Prypeci.lnk [2010-02-07 17:43:49 | 000,126,944 | ---- | C] () -- C:\Users\Admin\Documents\desktop_28348219.ico [2010-02-07 14:21:44 | 000,148,737 | ---- | C] () -- C:\Users\Admin\Desktop\Bez tytułu.jpg [2010-02-04 21:07:22 | 006,411,525 | ---- | C] () -- C:\Users\Admin\Desktop\va - the ones that get away (dejan gruevski's afterlove mix).mp3 [2010-02-03 14:32:25 | 000,524,288 | -HS- | C] () -- C:\Users\Admin\ntuser.dat{dacd8a26-10c7-11df-904b-001c2569d9df}.TMContainer00000000000000000002.regtrans-ms [2010-02-03 14:32:25 | 000,524,288 | -HS- | C] () -- C:\Users\Admin\ntuser.dat{dacd8a26-10c7-11df-904b-001c2569d9df}.TMContainer00000000000000000001.regtrans-ms [2010-02-03 14:32:25 | 000,065,536 | -HS- | C] () -- C:\Users\Admin\ntuser.dat{dacd8a26-10c7-11df-904b-001c2569d9df}.TM.blf [2010-01-13 23:17:40 | 000,013,018 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_vcredistUI3C82.txt [2010-01-13 23:05:46 | 000,530,014 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_vcredistMSI3360.txt [2010-01-13 23:05:44 | 000,014,384 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_vcredistUI3360.txt [2010-01-13 14:56:07 | 000,524,288 | -HS- | C] () -- C:\Users\Admin\ntuser.dat{e8539efd-0048-11df-ae3d-001c2569d9df}.TMContainer00000000000000000002.regtrans-ms [2010-01-13 14:56:07 | 000,524,288 | -HS- | C] () -- C:\Users\Admin\ntuser.dat{e8539efd-0048-11df-ae3d-001c2569d9df}.TMContainer00000000000000000001.regtrans-ms [2010-01-13 14:56:07 | 000,065,536 | -HS- | C] () -- C:\Users\Admin\ntuser.dat{e8539efd-0048-11df-ae3d-001c2569d9df}.TM.blf [2010-01-05 20:36:42 | 000,384,830 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_vcredistMSI503F.txt [2010-01-05 20:36:42 | 000,011,236 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_vcredistUI503F.txt [2010-01-04 12:51:59 | 000,383,068 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_vcredistMSI1E65.txt [2010-01-04 12:51:56 | 000,016,056 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_vcredistUI1E65.txt [2009-12-12 21:31:58 | 000,595,720 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_NET_Framework35_LangPack_MSI275B.txt [2009-12-12 21:31:50 | 000,075,654 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_dotnetfx35install_lp.txt [2009-12-12 21:31:50 | 000,000,002 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_dotnetfx35error_lp.txt [2009-12-12 21:30:52 | 001,815,132 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_NET_Framework35_x64_MSI2683.txt [2009-12-12 21:25:09 | 000,004,456 | ---- | C] () -- C:\Users\Admin\AppData\Local\setup.log [2009-12-12 21:24:19 | 002,053,248 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_NET_Framework35_x64_MSI2180.txt [2009-12-12 21:07:23 | 000,000,225 | ---- | C] () -- C:\Windows\wininit.ini [2009-12-11 17:26:48 | 002,467,066 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_NET_Framework35_x64_MSI1D94.txt [2009-12-11 17:13:14 | 000,587,187 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_depcheck_NETFX_EXP_35.txt [2009-12-11 17:13:10 | 000,646,806 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_dotnetfx35install.txt [2009-12-11 17:13:10 | 000,000,002 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_dotnetfx35error.txt [2009-12-07 20:24:44 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2009-11-12 20:21:36 | 000,424,152 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_vcredistMSI4972.txt [2009-11-12 20:21:31 | 000,016,872 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_vcredistUI4972.txt [2009-11-07 12:30:34 | 001,589,248 | ---- | C] () -- C:\Windows\SysWow64\libmysql_d.dll [2009-11-06 10:58:04 | 000,178,975 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2009-08-13 19:55:08 | 000,000,245 | ---- | C] () -- C:\Windows\VOGEL.INI [2009-02-22 19:15:41 | 000,385,024 | ---- | C] () -- C:\Windows\SysWow64\lxdicomx.dll [2009-02-22 19:15:41 | 000,294,912 | ---- | C] () -- C:\Windows\SysWow64\lxdiinst.dll [2009-01-19 17:38:39 | 000,168,448 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2009-01-19 17:38:38 | 003,596,288 | ---- | C] () -- C:\Windows\SysWow64\qt-dx331.dll [2009-01-19 17:38:38 | 000,795,648 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2009-01-19 17:38:38 | 000,130,048 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2009-01-19 17:38:37 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2009-01-19 17:38:37 | 000,000,547 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll.manifest [2009-01-18 11:52:45 | 000,076,288 | ---- | C] () -- C:\Users\Admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-01-16 22:51:23 | 000,028,295 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_depcheckdotnetfx30.txt [2009-01-16 22:51:19 | 000,019,144 | ---- | C] () -- C:\Users\Admin\AppData\Local\uxeventlog.txt [2009-01-16 22:51:19 | 000,000,632 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_dotnetfx3error.txt [2009-01-16 22:51:17 | 000,034,440 | ---- | C] () -- C:\Users\Admin\AppData\Local\dd_dotnetfx3install.txt [2009-01-16 22:27:30 | 000,152,476 | ---- | C] () -- C:\ProgramData\nvModes.001 [2009-01-16 22:27:29 | 000,152,476 | ---- | C] () -- C:\ProgramData\nvModes.dat [2009-01-16 22:18:39 | 000,000,680 | ---- | C] () -- C:\Users\Admin\AppData\Local\d3d9caps.dat [2009-01-16 21:55:04 | 000,000,732 | ---- | C] () -- C:\Users\Admin\AppData\Local\d3d9caps64.dat [2008-10-07 09:13:30 | 000,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll [2008-10-07 09:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll [2008-01-21 03:49:10 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini [2008-01-21 03:48:56 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2007-12-16 17:13:21 | 000,381,510 | ---- | C] () -- C:\Users\Admin\AppData\Local\Profile.BurnoutParadiseSave [2007-03-12 12:01:30 | 000,273,408 | ---- | C] () -- C:\Windows\NVGfxOgl.dll [2001-09-05 15:05:16 | 000,045,568 | ---- | C] () -- C:\Windows\SysWow64\sxpcompq.dll [1997-01-24 07:52:00 | 000,019,968 | ---- | C] () -- C:\Windows\SysWow64\sxpcpuid.dll [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 487 bytes -> C:\ProgramData\TEMP:05EE1EEF < End of report >

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:23:06, on 2010-02-08 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18000) Boot mode: Normal Running processes: C:\Program Files (x86)\Lexmark 3500-4500 Series\lxdimon.exe C:\Program Files (x86)\ipla\ipla.exe C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe C:\Program Files (x86)\uTorrent\uTorrent.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe D:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\ievkbd.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file) O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe" O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneCmd.exe" boot "C:\Users\Admin\AppData\Local\NVIDIA Corporation\nTune\Profiles\nvsutil.nsu" O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [IPLA!] C:\Program Files (x86)\ipla\ipla.exe /autorun O4 - HKCU\..\RunOnce: [EVEREST AutoStart] D:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'USŁUGA SIECIOWA') O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: &Wirtualna klawiatura - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O9 - Extra button: &Sprawdzanie adresów - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll O13 - Gopher Prefix: O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll O20 - AppInit_DLLs: C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: lxdi_device - - C:\Windows\system32\lxdicoms.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing) O23 - Service: MySQL501 - Unknown owner - D:\Program.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing) O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - Unknown owner - C:\Windows\System32\TuneUpDefragService.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Update Center Service (UpdateCenterService) - NVIDIA - C:\Program Files (x86)\NVIDIA Corporation\System Update\UpdateCenterService.exe O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 8582 bytes

**Posty:** 18165 · przez **wojtas** 08 Lut 2010, 20:32

Proszę zastosować się do zasad wstawiania logów i edytować swój post zgodnie z zasadami

**Posty:** 258 · przez **DjAnarbes** 08 Lut 2010, 21:08

Gdzieś mi sie zawieruszył

Może być?

**Posty:** 18165 · przez **wojtas** 08 Lut 2010, 21:24

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found]
O32 - AutoRun File - [2008-03-28 05:46:58 | 000,000,000 | ---D | M] - E:\AUTORUN -- [ CDFS ]
O32 - AutoRun File - [2004-09-27 04:24:38 | 000,000,041 | R--- | M] () - E:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{6dd8147a-e019-11de-bc9e-001c2569d9df}\Shell\Open(&0)\command - "" = G:\Recycled\ctfmon.exe -- File not found
O33 - MountPoints2\{88e8f99a-ec4a-11dd-9142-001c2569d9df}\Shell\Open(&0)\command - "" = G:\Recycled\ctfmon.exe -- File not found
O33 - MountPoints2\{dbd216b8-e416-11dd-8b9f-001c2569d9df}\Shell - "" = AutoRun
O33 - MountPoints2\{dbd216b8-e416-11dd-8b9f-001c2569d9df}\Shell\AutoRun\command - "" = F:\SETUP.EXE -- File not found

:Files
C:\Users\Admin\AppData\Roaming\Mozilla\FireFox\Profiles\f6j3exqg.default\searchplugins\ask.xml
C:\Users\Admin\AppData\Roaming\Mozilla\FireFox\Profiles\f6j3exqg.default\searchplugins\daemon-search.xml

:Commands
[emptytemp]

Kliknij w Run Fix. I potwierdz reset kompa .

1.Uruchom OTL z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem]
4. zrób skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie ) i daj raport ze skanu

**Posty:** 258 · przez **DjAnarbes** 08 Lut 2010, 22:13

Zrobiłem wszystko chyba cos podziałało bo jest lepiej

Kod: Zaznacz wszystko: Malwarebytes' Anti-Malware 1.44 Wersja bazy definicji: 3709 Windows 6.0.6001 Service Pack 1 Internet Explorer 7.0.6001.18000 2010-02-08 21:12:33 mbam-log-2010-02-08 (21-12-33).txt Typ skanowania: Szybkie skanowanie Przeskanowane obiekty: 99531 Upłynęło: 3 minute(s), 10 second(s) Zainfekowane procesy w pamięci: 0 Zainfekowane moduły pamięci: 0 Zainfekowane klucze rejestru: 0 Zainfekowane wartości rejestru: 0 Zainfekowane pliki rejestru: 2 Zainfekowane foldery: 0 Zainfekowane pliki: 0 Zainfekowane procesy w pamięci: (Nie wykryto groźnych plików) Zainfekowane moduły pamięci: (Nie wykryto groźnych plików) Zainfekowane klucze rejestru: (Nie wykryto groźnych plików) Zainfekowane wartości rejestru: (Nie wykryto groźnych plików) Zainfekowane pliki rejestru: HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Zainfekowane foldery: (Nie wykryto groźnych plików) Zainfekowane pliki: (Nie wykryto groźnych plików)

**Posty:** 18165 · przez **wojtas** 08 Lut 2010, 22:31

już jest czysto

Autor postu otrzymał pochwałę