Wirus trojan

[zalamana 6969]

Witam mam ogromny problem nie wiem jak mam sobie poradzic jestem zalamana tym bardziej ze nie znam sie na komputerach.Mianowicie mam wirusa trojana a przy skanowaniu programem antywirusowym nie wykrywa a jak zrobilam skan online wykrylo mi 24 zagrozenia kiedy sciagam program do usuwania wirusow to wyswietlaja sie rozne komunikaty ze nie moge zainstalowac mam bardzo zainfekowany laptop POMOCY!!!!!!!

[NieWiem]

1. Jaki system operacyjny jest zainstalowany na tym komputerze?

2. Przeklej wynik skanowania programu AV, żeby rozeznać się o czym mówimy.

[zalamana 6969]

Uzywam viste a mam AV avast przy skanowaniu z nim nie wykrywa niczego a jak robie skan z Eset Smart Installer wykrywa mi trojana a wpadlam przypadkiem na to wszystko bo mam program Advanced SystemCare przy skanie zobaczylam trojana wczesniej juz go mialam ale dawalam do kwarantannynic chyba nie dalo

[NieWiem]

Czy system jest 32- czy 64-bitowy?

Start >> prawoklik na przycisk Komputer >> Właściwości >> w oknie będzie pisać jaki rodzaj systemu.

[zalamana 6969]

32

[NieWiem]

Pobierz FRST w wersji zgodnej z Twoim systemem - 32bit.
Zapisz na pulpicie, uruchom, kliknij scan.
Wygeneruje dwa logi.

[zalamana 6969]

Juz zrobilam i co dalej

[NieWiem]

Należy te dwa pliki (frst.txt i addition.txt) załączyć w swojej odpowiedzi
Potem ja je sobie pooglądam i powiem, co należy robić dalej.

[zalamana 6969]

Kod: Zaznacz wszystko

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01
Ran by martula (administrator) on MARTULA-PC on 25-03-2014 13:05:27
Running from C:\Users\martula\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================


GroupPolicyUsers\S-1-5-21-614805977-2590222267-3122971048-1002\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

ProxyServer: socks=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
URLSearchHook: HKLM - (No Name) - {ae75cea9-579a-43e7-8d22-4d5dea612c5c} -  No File
URLSearchHook: HKCU - (No Name) - {cd90bf73-20f6-44ef-993d-bb920303bd2e} -  No File
URLSearchHook: HKCU - (No Name) - {ce0c2586-da36-452b-acdb-320d9bcb19bf} -  No File
URLSearchHook: HKCU - (No Name) - {ae75cea9-579a-43e7-8d22-4d5dea612c5c} -  No File
SearchScopes: HKLM - {8A96AF9E-4074-43b7-BEA3-87217BDA74C8} URL = http://www.searchqu.com/web?src=ieb&systemid=101&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} URL = http://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms}
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2881159
SearchScopes: HKCU - DefaultScope {8A96AF9E-4074-43b7-BEA3-87217BDA74C8} URL = http://www.searchqu.com/web?src=ieb&systemid=101&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?FORM=IEFM1&q={searchTerms}&src={referrer:source?}
SearchScopes: HKCU - {70D46D94-BF1E-45ED-B567-48701376298E} URL = http://127.0.0.1:4664/search&s=lZGAFC8cbyJgbbthnvRDZ4oKAdU?q={searchTerms}
SearchScopes: HKCU - {8A96AF9E-4074-43b7-BEA3-87217BDA74C8} URL = http://www.searchqu.com/web?src=ieb&systemid=101&q={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} URL = http://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2881159
SearchScopes: HKCU - {E80A14AA-5FCF-4308-908A-CE88436514D0} URL = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
BHO: No Name - {02478D38-C3F9-4efb-9B51-7695ECA05670} -  No File
BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: No Name - {3049C3E9-B461-4BC5-8870-4C09146192CA} -  No File
BHO: Conduit Engine  - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name - {99079a25-328f-4bd4-be04-00955acaa0a7} -  No File
BHO: No Name - {ae75cea9-579a-43e7-8d22-4d5dea612c5c} -  No File
BHO: No Name - {CA4520F3-AE13-4FB1-A513-58E23991C86D} -  No File
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {6FE79ACA-A498-45E5-8BC4-1B9F380CE468} http://www.gamehouse.com/games/abxgh.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\martula\AppData\Roaming\Mozilla\Firefox\Profiles\44lazgw3.default
FF Homepage: http://www.google.com
FF SelectedSearchEngine: Google
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Google
FF Keyword.URL: https://www.google.com/search
FF NewTab: http://www.google.com
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - D:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll No File
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll No File
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1 - C:\Program Files\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\martula\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\martula\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\martula\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npVividasPlayer.dll ( )
FF Plugin ProgramFiles/Appdata: C:\Users\martula\AppData\Roaming\mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
FF SearchPlugin: C:\Users\martula\AppData\Roaming\Mozilla\Firefox\Profiles\44lazgw3.default\searchplugins\Search_Results.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml
FF Extension: No Name - C:\Users\martula\AppData\Roaming\Mozilla\Firefox\Profiles\44lazgw3.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-12-02]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-02-25]
FF HKLM\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

Chrome:
=======
CHR HomePage: hxxp://www.wp.pl/
CHR Plugin: (Chrome PDF Viewer) - C:\Users\martula\AppData\Local\Google\Chrome\Application\33.0.1750.154\pdf.dll ()
CHR Plugin: (Google Gears 0.5.33.0) - C:\Users\martula\AppData\Local\Google\Chrome\Application\33.0.1750.154\gears.dll No File
CHR Plugin: (Shockwave Flash) - C:\Users\martula\AppData\Local\Google\Chrome\Application\33.0.1750.154\gcswf32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.230.5) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U23) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (DivX Player Netscape Plugin) - C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll No File
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll No File
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll No File
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll No File
CHR Plugin: (Zylom Plugin) - C:\Program Files\Mozilla Firefox\plugins\npzylomgamesplayer.dll No File
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll No File
CHR Plugin: (Unity Player) - C:\Users\martula\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (BrowserPlus (from Yahoo!) v2.9.8) - C:\Users\martula\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll No File
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.0.51204.0\npctrl.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (YouTube) - C:\Users\martula\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-27]
CHR Extension: (Szukaj w Google) - C:\Users\martula\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-27]
CHR Extension: (Google Wallet) - C:\Users\martula\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (Gmail) - C:\Users\martula\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-27]
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-12-27]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-12-27]
CHR StartMenuInternet: Google Chrome - C:\Users\martula\AppData\Local\Google\Chrome\Application\chrome.exe

==================== NetSvcs (Whitelisted) ===================


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-25 02:45

==================== End Of Log ============================

[i][size=85]Dodano Dzisiaj, 13:24:[/size][/i]
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014  01
Ran by martula at 2014-03-25 13:06:02
Running from C:\Users\martula\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================


==================== Restore Points  =========================

28-02-2014 21:09:17 Windows Update
06-03-2014 22:06:08 Windows Update
24-03-2014 22:35:11 Windows Update
24-03-2014 23:01:02 Instalator modułów systemu Windows
24-03-2014 23:18:28 Windows Update
25-03-2014 06:25:20 Windows Update

==================== Hosts content: ==========================

2006-11-02 11:23 - 2010-11-25 14:48 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf16fdb4b0e2f0.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-614805977-2590222267-3122971048-1000Core.job => C:\Users\martula\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-614805977-2590222267-3122971048-1000UA.job => C:\Users\martula\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-614805977-2590222267-3122971048-501UA.job => C:\Users\Guest\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Wise Care 365.job => C:\Program Files\Wise\Wise Care 365\WiseTray.exe

==================== Loaded Modules (whitelisted) =============


==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData:$SS_DESCRIPTOR_LVVWVBGV0VFBTLX4D06YH7LVUTPXGJMBKE1R0WT1VH7E24F7PHCTVF4VMVFVVX4VM
AlternateDataStreams: C:\Users\All Users:$SS_DESCRIPTOR_LVVWVBGV0VFBTLX4D06YH7LVUTPXGJMBKE1R0WT1VH7E24F7PHCTVF4VMVFVVX4VM
AlternateDataStreams: C:\Users\martula:zylomtest
AlternateDataStreams: C:\Users\martula:zylomtr{00013KEU-UKQE-K6V0-JVCJ-27VV7P3D0VUA}
AlternateDataStreams: C:\Users\martula:zylomtr{000HQ7FF-AD7A-3FG1-79JF-254CM94A3000}
AlternateDataStreams: C:\Users\martula:zylomtr{000HQ7FF-AD7A-3FG2-FKAU-276NGVLOIVVI}
AlternateDataStreams: C:\Users\martula:zylomtr{000HQ7FF-AD7A-3FG4-ICFS-28SORCTSAVU0}
AlternateDataStreams: C:\ProgramData\Application Data:$SS_DESCRIPTOR_LVVWVBGV0VFBTLX4D06YH7LVUTPXGJMBKE1R0WT1VH7E24F7PHCTVF4VMVFVVX4VM
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1
AlternateDataStreams: C:\ProgramData\TEMP:F1B6FD2F

==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: isatap.{9E3D97A4-37C3-4432-9C8D-AA43ECA3DBAD}
Description: Karta Microsoft ISATAP
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (03/25/2014 02:39:57 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/25/2014 00:34:20 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/24/2014 11:33:17 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/08/2014 01:23:27 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/06/2014 11:14:42 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80070003

Error: (03/06/2014 11:02:58 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/28/2014 10:28:37 PM) (Source: Application Error) (User: )
Description: Aplikacja powodująca błąd DllHost.exe, wersja 6.0.6000.16386, sygnatura czasowa 0x4549b14e, moduł powodujący błąd wscui.cpl_unloaded, wersja 0.0.0.0, sygnatura czasowa 0x49e03846, kod wyjątku 0xc0000005, przesunięcie błędu 0x6911d30f,
identyfikator procesu 0x1074, godzina rozpoczęcia aplikacji 0xDllHost.exe0.

Error: (02/28/2014 10:07:07 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/15/2014 11:28:12 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/15/2014 01:52:58 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (03/25/2014 07:30:05 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: ZARZĄDZANIE NT)
Description: 0x80070643Pakiet językowy dla programu Microsoft .NET Framework 3.5 z dodatkiem Service Pack 1 (KB951847): procesory x86{52946BC0-F2B5-465C-A073-60C89A71129A}100

Error: (03/25/2014 02:41:27 AM) (Source: Microsoft-Windows-LanguagePackSetup) (User: ZARZĄDZANIE NT)
Description: 0x80070032

Error: (03/25/2014 00:37:04 AM) (Source: Microsoft-Windows-LanguagePackSetup) (User: ZARZĄDZANIE NT)
Description: 0x80070032

Error: (03/25/2014 00:23:54 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: ZARZĄDZANIE NT)
Description: 0x80070643Pakiet językowy dla programu Microsoft .NET Framework 3.5 z dodatkiem Service Pack 1 (KB951847): procesory x86{52946BC0-F2B5-465C-A073-60C89A71129A}100

Error: (03/24/2014 11:49:43 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: ZARZĄDZANIE NT)
Description: 0x80070643Pakiet językowy dla programu Microsoft .NET Framework 3.5 z dodatkiem Service Pack 1 (KB951847): procesory x86{52946BC0-F2B5-465C-A073-60C89A71129A}100

Error: (03/24/2014 11:34:10 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: ZARZĄDZANIE NT)
Description: 0x80070032

Error: (03/08/2014 01:26:06 AM) (Source: Microsoft-Windows-LanguagePackSetup) (User: ZARZĄDZANIE NT)
Description: 0x80070032

Error: (03/06/2014 11:20:23 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: ZARZĄDZANIE NT)
Description: 0x80070643Pakiet językowy dla programu Microsoft .NET Framework 3.5 z dodatkiem Service Pack 1 (KB951847): procesory x86{52946BC0-F2B5-465C-A073-60C89A71129A}100

Error: (03/06/2014 11:09:54 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: ZARZĄDZANIE NT)
Description: 0x80070032

Error: (02/28/2014 10:07:56 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: ZARZĄDZANIE NT)
Description: 0x80070032


Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 56%
Total physical RAM: 2907.68 MB
Available physical RAM: 1252.36 MB
Total Pagefile: 6057.61 MB
Available Pagefile: 4435.53 MB
Total Virtual: 2047.88 MB
Available Virtual: 1930.69 MB

==================== Drives ================================

Drive c: (SYSTEM) (Fixed) (Total:92.21 GB) (Free:33.43 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (DATA) (Fixed) (Total:48.05 GB) (Free:30.73 GB) NTFS

==================== End Of Log ============================

[NieWiem]

Pisałem "załączyć" a nie "wkleić", proszę czytaj uważniej to, co piszę.
Poproszę jakiegoś moda zaraz o naprawienie tego, aczkolwiek raport ten wygląda bardzo dziwnie.

Proszę, załącz te pliki w swoim poście.

[zalamana 6969]

Wiem co sobie teraz pomyslisz ale niestety nie wiem jak ja mam to zalaczyc w poscie przepraszam

Dodano Dzisiaj, 13:42:
juz mam

[NieWiem]

Hm, to dziwne, ale w raporcie brakuje dwóch sekcji: Registry i Processes.

Spróbujmy jeszcze inaczej.

Pobierz OTS i zapisz na pulpicie.
Uruchom z prawokliku jako administrator.
Zobaczysz takie okno:


Zaznacz u góry opcję Scan All Users.
Nic nie zmieniaj w konfiguracji, tylko w oknie po prawej na dole kliknij Extras.

Wciśnij Run Scan i poczekaj. Powatanie raport. Tego raportu nie załączaj, ale wklej go w poście.

[zalamana 6969]

No niestety nie moge go sciagnac a tym bardziej zainstalowac avast blokuje

[NieWiem]

Wyłącz Avasta. Program nie jest szkodliwy.

[zalamana 6969]

Kod: Zaznacz wszystko

OTS logfile created on: 2014-03-25 14:05:59 - Run 1
OTS by OldTimer - Version 3.1.47.2     Folder = C:\Users\martula\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd

3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 36,00% Memory free
6,00 Gb Paging File | 4,00 Gb Available in Paging File | 69,00% Paging File free
Paging file location(s): ?:\pagefile.sys

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 92,21 Gb Total Space | 33,41 Gb Free Space | 36,23% Space Free | Partition Type: NTFS
Drive D: | 48,05 Gb Total Space | 30,73 Gb Free Space | 63,96% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: MARTULA-PC
Current User Name: martula
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days

[Processes - Safe List]
ots.exe -> C:\Users\martula\Downloads\OTS.exe -> [2014-03-25 14:04:28 | 000,646,656 | ---- | M] (OldTimer Tools)
frst.exe -> C:\Users\martula\Desktop\FRST.exe -> [2014-03-25 13:00:03 | 001,145,856 | ---- | M] (Farbar)
avastui.exe -> C:\Program Files\Alwil Software\Avast5\AvastUI.exe -> [2014-02-11 20:03:33 | 003,767,096 | ---- | M] (AVAST Software)
avastsvc.exe -> C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -> [2014-02-11 20:03:32 | 000,050,344 | ---- | M] (AVAST Software)
armsvc.exe -> C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -> [2013-12-18 19:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated)
asc.exe -> C:\Program Files\IObit\Advanced SystemCare 6\ASC.exe -> [2013-01-22 18:15:34 | 003,979,072 | ---- | M] (IObit)
asctray.exe -> C:\Program Files\IObit\Advanced SystemCare 6\ASCTray.exe -> [2013-01-15 17:47:12 | 000,491,840 | ---- | M] (IObit)
ascservice.exe -> C:\Program Files\IObit\Advanced SystemCare 6\ASCService.exe -> [2013-01-15 17:47:10 | 000,465,216 | ---- | M] (IObit)
uaservice7.exe -> C:\Windows\System32\UAService7.exe -> [2011-09-12 19:35:52 | 000,135,168 | ---- | M] (Sony DADC Austria AG.)
explorer.exe -> C:\Windows\explorer.exe -> [2009-04-11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation)
rthdvcpl.exe -> C:\Windows\RtHDVCpl.exe -> [2008-07-16 18:01:30 | 006,253,088 | ---- | M] (Realtek Semiconductor)
testhandler.exe -> C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe -> [2008-04-25 13:23:36 | 000,303,104 | ---- | M] (Fujitsu Siemens Computers)

[Modules - No Company Name]
pepflashplayer.dll -> C:\Users\martula\AppData\Local\Google\Chrome\Application\33.0.1750.154\PepperFlash\pepflashplayer.dll -> [2014-03-15 01:50:40 | 013,637,448 | ---- | M] ()
ppgooglenaclpluginchrome.dll -> C:\Users\martula\AppData\Local\Google\Chrome\Application\33.0.1750.154\ppgooglenaclpluginchrome.dll -> [2014-03-15 01:50:40 | 000,394,568 | ---- | M] ()
pdf.dll -> C:\Users\martula\AppData\Local\Google\Chrome\Application\33.0.1750.154\pdf.dll -> [2014-03-15 01:50:38 | 004,061,000 | ---- | M] ()
ffmpegsumo.dll -> C:\Users\martula\AppData\Local\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll -> [2014-03-15 01:50:32 | 001,647,432 | ---- | M] ()
chrome_elf.dll -> C:\Users\martula\AppData\Local\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll -> [2014-03-15 01:50:30 | 000,051,016 | ---- | M] ()
libglesv2.dll -> C:\Users\martula\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libGLESv2.dll -> [2014-01-23 17:39:05 | 004,591,616 | ---- | M] ()
libegl.dll -> C:\Users\martula\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libEGL.dll -> [2014-01-23 17:39:05 | 000,112,128 | ---- | M] ()
libcef.dll -> C:\Program Files\Alwil Software\Avast5\libcef.dll -> [2013-11-12 15:04:52 | 019,336,120 | ---- | M] ()
madexcept_.bpl -> C:\Program Files\IObit\Advanced SystemCare 6\madexcept_.bpl -> [2013-01-15 17:48:26 | 000,348,992 | ---- | M] ()
maddisasm_.bpl -> C:\Program Files\IObit\Advanced SystemCare 6\maddisAsm_.bpl -> [2013-01-15 17:48:26 | 000,051,008 | ---- | M] ()
madbasic_.bpl -> C:\Program Files\IObit\Advanced SystemCare 6\madbasic_.bpl -> [2013-01-15 17:48:24 | 000,183,616 | ---- | M] ()
webres.dll -> C:\Program Files\IObit\Advanced SystemCare 6\webres.dll -> [2013-01-15 17:47:56 | 000,893,248 | ---- | M] ()
sqlite3.dll -> C:\Program Files\IObit\Advanced SystemCare 6\sqlite3.dll -> [2013-01-15 17:47:50 | 000,517,440 | ---- | M] ()
scan.dll -> C:\Program Files\IObit\Advanced SystemCare 6\Scan.dll -> [2013-01-15 17:47:44 | 001,230,144 | ---- | M] ()
ascextmenu.dll -> C:\Program Files\IObit\Advanced SystemCare 6\ASCExtMenu.dll -> [2013-01-15 17:47:02 | 000,143,168 | ---- | M] ()
unlockercom.dll -> C:\Program Files\Unlocker\UnlockerCOM.dll -> [2010-07-04 22:32:38 | 000,010,752 | ---- | M] ()
rarext.dll -> D:\Program Files\WinRAR\RarExt.dll -> [2003-05-19 18:24:40 | 000,119,808 | ---- | M] ()

[Win32 Services - Safe List]
(AdobeFlashPlayerUpdateSvc) Adobe Flash Player Update Service [On_Demand | Stopped] -> C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -> [2014-03-25 00:15:56 | 000,257,928 | ---- | M] (Adobe Systems Incorporated)
(avast! Antivirus) avast! Antivirus [Auto | Running] -> C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -> [2014-02-11 20:03:32 | 000,050,344 | ---- | M] (AVAST Software)
(AdobeARMservice) Adobe Acrobat Update Service [Auto | Running] -> C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -> [2013-12-18 19:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated)
(SkypeUpdate) Skype Updater [Auto | Stopped] -> C:\Program Files\Skype\Updater\Updater.exe -> [2013-10-23 08:15:08 | 000,172,192 | R--- | M] (Skype Technologies)
(MozillaMaintenance) Mozilla Maintenance Service [On_Demand | Stopped] -> C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -> [2013-08-14 18:55:29 | 000,117,656 | ---- | M] (Mozilla Foundation)
(AdvancedSystemCareService6) Advanced SystemCare Service 6 [Auto | Running] -> C:\Program Files\IObit\Advanced SystemCare 6\ASCService.exe -> [2013-01-15 17:47:10 | 000,465,216 | ---- | M] (IObit)
(Steam Client Service) Steam Client Service [On_Demand | Stopped] -> C:\Program Files\Common Files\Steam\SteamService.exe -> [2012-10-26 16:44:05 | 000,529,744 | ---- | M] (Valve Corporation)
(UserAccess7) SecuROM User Access Service (V7) [Auto | Running] -> C:\Windows\System32\UAService7.exe -> [2011-09-12 19:35:52 | 000,135,168 | ---- | M] (Sony DADC Austria AG.)
(ServiceLayer) ServiceLayer [On_Demand | Stopped] -> C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -> [2011-03-21 12:21:24 | 000,632,832 | ---- | M] (Nokia)
(TestHandler) Fujitsu Siemens Computers Diagnostic Testhandler [Auto | Running] -> C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe -> [2008-04-25 13:23:36 | 000,303,104 | ---- | M] (Fujitsu Siemens Computers)
(WinDefend) Windows Defender [Auto | Running] -> C:\Program Files\Windows Defender\MpSvc.dll -> [2008-01-21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation)

[Driver Services - Safe List]
(1472345drv) 1472345drv [File_System | Unknown | Running] ->  -> File not found
(07529244) 07529244 [Kernel | Unknown | Running] ->  -> File not found
(aswTdi) aswTdi [Kernel | System | Running] -> C:\Windows\System32\drivers\aswTdi.sys -> [2014-02-11 20:03:40 | 000,057,672 | ---- | M] (AVAST Software)
(aswSnx) aswSnx [File_System | System | Running] -> C:\Windows\System32\drivers\aswSnx.sys -> [2014-02-11 20:03:39 | 000,775,952 | ---- | M] (AVAST Software)
(aswSP) aswSP [File_System | System | Running] -> C:\Windows\System32\drivers\aswSP.sys -> [2014-02-11 20:03:39 | 000,410,784 | ---- | M] (AVAST Software)
(aswMonFlt) aswMonFlt [File_System | Auto | Running] -> C:\Windows\System32\drivers\aswMonFlt.sys -> [2014-02-11 20:03:39 | 000,067,824 | ---- | M] (AVAST Software)
(aswRdr) aswRdr [Kernel | System | Running] -> C:\Windows\System32\drivers\aswRdr.sys -> [2014-02-11 20:03:39 | 000,054,832 | ---- | M] (AVAST Software)
(aswVmm) avast! VM Monitor [Kernel | Boot | Running] -> C:\Windows\System32\drivers\aswVmm.sys -> [2014-01-21 23:56:53 | 000,180,248 | ---- | M] ()
(aswRvrt) avast! Revert [Kernel | Boot | Running] -> C:\Windows\System32\drivers\aswRvrt.sys -> [2013-11-12 15:04:55 | 000,049,944 | ---- | M] ()
(aswKbd) aswKbd [Kernel | System | Running] -> C:\Windows\System32\drivers\aswKbd.sys -> [2013-02-28 09:36:35 | 000,021,640 | ---- | M] (AVAST Software)
(atksgt) atksgt [Kernel | Auto | Running] -> C:\Windows\System32\drivers\atksgt.sys -> [2011-06-06 19:38:24 | 000,279,712 | ---- | M] ()
(lirsgt) lirsgt [Kernel | Auto | Running] -> C:\Windows\System32\drivers\lirsgt.sys -> [2011-06-06 19:38:24 | 000,025,888 | ---- | M] ()
(sptd) sptd [Kernel | Boot | Running] -> C:\Windows\System32\Drivers\sptd.sys -> [2011-02-24 00:57:19 | 000,431,672 | ---- | M] ()
(RTL8169) Realtek 8169 NT Driver [Kernel | On_Demand | Running] -> C:\Windows\System32\drivers\Rtlh86.sys -> [2010-06-23 08:21:32 | 000,259,176 | ---- | M] (Realtek                                            )
(RTL8187B) Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter [Kernel | On_Demand | Running] -> C:\Windows\System32\drivers\RTL8187B.sys -> [2010-03-31 05:59:24 | 000,350,720 | ---- | M] (Realtek Semiconductor Corporation                           )
(sfsync04) StarForce Protection Synchronization Driver (version 4.x) [Kernel | Boot | Running] -> C:\Windows\System32\drivers\sfsync04.sys -> [2009-02-03 16:45:07 | 000,059,520 | ---- | M] (Protection Technology (StarForce))
(sfdrv01) StarForce Protection Environment Driver (version 1.x) [Kernel | Boot | Running] -> C:\Windows\System32\drivers\sfdrv01.sys -> [2009-02-03 16:36:58 | 000,059,000 | ---- | M] (Protection Technology (StarForce))
(KMWDFILTER) HIDUASDesc [Kernel | On_Demand | Stopped] -> C:\Windows\System32\drivers\KMWDFILTER.sys -> [2008-10-09 14:42:42 | 000,017,408 | ---- | M] (Windows (R) Codename Longhorn DDK provider)
(pccsmcfd) PCCS Mode Change Filter Driver [Kernel | On_Demand | Stopped] -> C:\Windows\System32\drivers\pccsmcfd.sys -> [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia)
(vserial) ELTIMA Virtual Serial Ports Driver [Kernel | On_Demand | Stopped] -> C:\Windows\System32\drivers\vserial.sys -> [2008-07-23 23:29:16 | 000,047,744 | ---- | M] ()
(vsbus) Virtual Serial Bus Enumerator [Kernel | On_Demand | Running] -> C:\Windows\System32\drivers\vsb.sys -> [2008-07-23 23:29:16 | 000,015,264 | ---- | M] ()
(ahcix86s) ahcix86s [Kernel | Disabled | Stopped] -> C:\Windows\system32\drivers\ahcix86s.sys -> [2008-05-27 12:55:54 | 000,173,576 | ---- | M] (AMD Technologies Inc.)
(JRAID) JRAID [Kernel | Disabled | Stopped] -> C:\Windows\system32\drivers\jraid.sys -> [2008-04-03 13:58:46 | 000,076,688 | ---- | M] (JMicron Technology Corp.)
(StarOpen) StarOpen [File_System | System | Running] -> C:\Windows\System32\drivers\StarOpen.sys -> [2006-07-24 15:05:00 | 000,005,632 | ---- | M] ()
(sfhlp02) StarForce Protection Helper Driver (version 2.x) [Kernel | Boot | Running] -> C:\Windows\System32\drivers\sfhlp02.sys -> [2006-06-14 15:56:56 | 000,013,680 | ---- | M] (Protection Technology (StarForce))
(sfsync03) StarForce Protection Synchronization Driver (version 3.x) [Kernel | Boot | Running] -> C:\Windows\System32\drivers\sfsync03.sys -> [2005-12-06 16:11:18 | 000,035,328 | ---- | M] (Protection Technology)
(tandpl) tandpl [Kernel | Auto | Running] -> C:\Windows\System32\drivers\tandpl.sys -> [2003-04-19 00:32:04 | 000,004,736 | ---- | M] ()
(enodpl) enodpl [Kernel | Auto | Running] -> C:\Windows\System32\drivers\enodpl.sys -> [2003-03-02 17:44:26 | 000,007,552 | ---- | M] ()

[Registry - Safe List]
< Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> ->
HKEY_LOCAL_MACHINE\: Main\\"Start Page" -> http://www.yahoo.com/ ->
HKEY_LOCAL_MACHINE\: Search\\"CustomSearch" -> http://us.rd.yahoo.com/customize/ie/defaults/cs/msgr9/*http://www.yahoo.com/ext/search/search.html ->
HKEY_LOCAL_MACHINE\: URLSearchHooks\\"{ae75cea9-579a-43e7-8d22-4d5dea612c5c}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
< Internet Explorer Settings [HKEY_USERS\.DEFAULT\] > -> ->
HKEY_USERS\.DEFAULT\: "ProxyEnable" -> 0 ->
< Internet Explorer Settings [HKEY_USERS\S-1-5-18\] > -> ->
HKEY_USERS\S-1-5-18\: "ProxyEnable" -> 0 ->
< Internet Explorer Settings [HKEY_USERS\S-1-5-19\] > -> ->
< Internet Explorer Settings [HKEY_USERS\S-1-5-20\] > -> ->
< Internet Explorer Settings [HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\] > -> ->
HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\: Main\\"Search Page" -> http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR ->
HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\: Main\\"Start Page" -> www.bing.com ->
HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\: Main\\"StartPageCache" -> 1 ->
HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\: SearchURL\\"" -> http://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com ->
HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\: URLSearchHooks\\"{ae75cea9-579a-43e7-8d22-4d5dea612c5c}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\: URLSearchHooks\\"{cd90bf73-20f6-44ef-993d-bb920303bd2e}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\: URLSearchHooks\\"{ce0c2586-da36-452b-acdb-320d9bcb19bf}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\: "ProxyEnable" -> 0 ->
HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\: "ProxyServer" -> socks= ->
< FireFox Settings [Prefs.js] > -> C:\Users\martula\AppData\Roaming\Mozilla\FireFox\Profiles\44lazgw3.default\prefs.js ->
browser.startup.homepage -> "www.google.com" ->
extensions.enabledItems -> wrc@avast.com:7.0.1456 ->
extensions.enabledItems -> {1FD91A9C-410C-4090-BBCC-55D3450EF433}:1.0 ->
extensions.enabledItems -> {28387537-e3f9-4ed7-860c-11e69af4a8a0}:4.6.1.01 ->
extensions.enabledItems -> {99079a25-328f-4bd4-be04-00955acaa0a7}:4.6.1.01 ->
browser.search.selectedEngine -> "Google" ->
browser.search.defaultengine -> "Google" ->
browser.search.defaultenginename -> "Google" ->
browser.search.order.1 -> "Google" ->
keyword.URL -> "https://www.google.com/search" ->
< FireFox Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla
HKLM\software\mozilla\Firefox\Extensions ->  ->
HKLM\software\mozilla\Firefox\Extensions\\wrc@avast.com -> C:\Program Files\Alwil Software\Avast5\WebRep\FF [C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST5\WEBREP\FF] -> [2014-02-11 20:03:41 | 000,000,000 | ---D | M]
HKLM\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F} -> C:\PROGRAMDATA\REAL\REALPLAYER\BROWSERRECORDPLUGIN\FIREFOX\EXT ->
HKLM\software\mozilla\Mozilla Firefox 23.0.1\extensions ->  ->
HKLM\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Plugins -> C:\Program Files\Mozilla Firefox\plugins [C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS] -> [2014-01-21 23:58:05 | 000,000,000 | ---D | M]
HKLM\software\mozilla\Thunderbird\Extensions ->  ->
< FireFox Extensions [User Folders] > ->
  -> C:\Users\martula\AppData\Roaming\Mozilla\Extensions -> [2012-07-10 17:53:23 | 000,000,000 | ---D | M]
  -> C:\Users\martula\AppData\Roaming\Mozilla\Extensions\home2@tomtom.com -> [2012-01-24 09:23:14 | 000,000,000 | ---D | M]
  -> C:\Users\martula\AppData\Roaming\Mozilla\Extensions\IMVUClientXUL@imvu.com -> [2010-07-01 19:32:49 | 000,000,000 | ---D | M]
  -> C:\Users\martula\AppData\Roaming\Mozilla\Firefox\Profiles\3savay7u.default\extensions -> [2011-06-19 07:54:43 | 000,000,000 | ---D | M]
  -> C:\Users\martula\AppData\Roaming\Mozilla\Firefox\Profiles\3savay7u.default\extensions\cacaoweb@cacaoweb.org -> [2011-03-12 16:04:14 | 000,000,000 | ---D | M]
  -> C:\Users\martula\AppData\Roaming\Mozilla\Firefox\Profiles\3savay7u.default\extensions\engine@conduit(23).com -> [2011-05-15 08:21:49 | 000,000,000 | ---D | M]
  -> C:\Users\martula\AppData\Roaming\Mozilla\Firefox\Profiles\44lazgw3.default\extensions -> [2014-02-11 20:00:55 | 000,000,000 | ---D | M]
< FireFox SearchPlugins [User Folders] > ->
Search_Results.xml -> C:\Users\martula\AppData\Roaming\Mozilla\FireFox\Profiles\44lazgw3.default\searchplugins\Search_Results.xml -> [2012-07-10 22:14:50 | 000,002,519 | ---- | M] ()
< FireFox Extensions [Program Folders] > ->
  -> C:\Program Files\Mozilla Firefox\extensions -> [2013-09-01 21:12:35 | 000,000,000 | ---D | M]
  -> C:\Program Files\Mozilla Firefox\browser\extensions -> [2013-09-01 21:12:35 | 000,000,000 | ---D | M]
Default   -> C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} -> [2013-08-25 15:09:51 | 000,000,000 | ---D | M]
  -> C:\Program Files\Mozilla Firefox\updated\extensions -> [2013-07-04 22:11:07 | 000,000,000 | ---D | M]
Skype Click to Call   -> C:\Program Files\Mozilla Firefox\updated\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} -> [2013-07-04 22:11:07 | 000,000,000 | ---D | M]
  -> C:\Program Files\Mozilla Firefox\updated\browser\extensions -> [2013-07-04 22:11:06 | 000,000,000 | ---D | M]
Skype Click to Call   -> C:\Program Files\Mozilla Firefox\updated\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} -> [2013-07-04 22:11:06 | 000,000,000 | ---D | M]
Default   -> C:\Program Files\Mozilla Firefox\updated\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} -> [2013-07-04 22:11:24 | 000,000,000 | ---D | M]
< HOSTS File > ([2010-11-25 14:48:13 | 000,000,027 | ---- | M] - 1 lines) -> C:\Windows\System32\drivers\etc\hosts ->
Reset Hosts
127.0.0.1       localhost
< BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ ->
{02478D38-C3F9-4efb-9B51-7695ECA05670} [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [HKLM] -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [Adobe PDF Reader Link Helper] -> [2013-12-18 19:42:40 | 000,068,480 | ---- | M] (Adobe Systems Incorporated)
{3049C3E9-B461-4BC5-8870-4C09146192CA} [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
{30F9B915-B755-4826-820B-08FBA6BD249D} [HKLM] -> C:\Program Files\ConduitEngine\prxConduitEngine.dll [Conduit Engine ] -> [2011-01-17 15:54:02 | 000,175,912 | ---- | M] (Conduit Ltd.)
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [HKLM] -> C:\Program Files\Java\jre7\bin\ssv.dll [Java(tm) Plug-In SSV Helper] -> [2013-06-26 19:45:41 | 000,463,272 | ---- | M] (Oracle Corporation)
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} [HKLM] -> C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [avast! Online Security] -> [2014-02-11 20:03:31 | 001,143,168 | ---- | M] (AVAST Software)
{99079a25-328f-4bd4-be04-00955acaa0a7} [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
{ae75cea9-579a-43e7-8d22-4d5dea612c5c} [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
{CA4520F3-AE13-4FB1-A513-58E23991C86D} [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
{DBC80044-A445-435b-BC74-9C25C1C588A9} [HKLM] -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [Java(tm) Plug-In 2 SSV Helper] -> [2013-06-26 19:45:40 | 000,171,944 | ---- | M] (Oracle Corporation)
< Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar ->
"{30F9B915-B755-4826-820B-08FBA6BD249D}" [HKLM] -> C:\Program Files\ConduitEngine\prxConduitEngine.dll [Conduit Engine ] -> [2011-01-17 15:54:02 | 000,175,912 | ---- | M] (Conduit Ltd.)
"{52836EB0-631A-47B1-94A6-61F9D9112DAE}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
"{99079a25-328f-4bd4-be04-00955acaa0a7}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
"{ae75cea9-579a-43e7-8d22-4d5dea612c5c}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
"{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}" [HKLM] -> C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [avast! Online Security] -> [2014-02-11 20:03:31 | 001,143,168 | ---- | M] (AVAST Software)
"10" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
< Internet Explorer ToolBars [HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\] > -> HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\Software\Microsoft\Internet Explorer\Toolbar\ ->
WebBrowser\\"{21FA44EF-376D-4D53-9B0F-8A89D3229068}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
WebBrowser\\"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
WebBrowser\\"{30F9B915-B755-4826-820B-08FBA6BD249D}" [HKLM] -> C:\Program Files\ConduitEngine\prxConduitEngine.dll [Conduit Engine ] -> [2011-01-17 15:54:02 | 000,175,912 | ---- | M] (Conduit Ltd.)
WebBrowser\\"{AE75CEA9-579A-43E7-8D22-4D5DEA612C5C}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
WebBrowser\\"{CD90BF73-20F6-44EF-993D-BB920303BD2E}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
WebBrowser\\"{CE0C2586-DA36-452B-ACDB-320D9BCB19BF}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
< Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->
"AvastUI.exe" -> C:\Program Files\Alwil Software\Avast5\AvastUI.exe ["C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui] -> [2014-02-11 20:03:33 | 003,767,096 | ---- | M] (AVAST Software)
"RtHDVCpl" -> C:\Windows\RtHDVCpl.exe [RtHDVCpl.exe] -> [2008-07-16 18:01:30 | 006,253,088 | ---- | M] (Realtek Semiconductor)
< Run [HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\] > -> HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->
"Advanced SystemCare 6" -> C:\Program Files\IObit\Advanced SystemCare 6\ASCTray.exe ["C:\Program Files\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart] -> [2013-01-15 17:47:12 | 000,491,840 | ---- | M] (IObit)
< Software Policy Settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer ->
< Software Policy Settings [HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000] > -> HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\SOFTWARE\Policies\Microsoft\Internet Explorer ->
< CurrentVersion Policy Settings - Explorer [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
< CurrentVersion Policy Settings - System [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats
< CurrentVersion Policy Settings [HKEY_USERS\.DEFAULT] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer ->
< CurrentVersion Policy Settings [HKEY_USERS\.DEFAULT] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System ->
< CurrentVersion Policy Settings [HKEY_USERS\S-1-5-18] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer ->
< CurrentVersion Policy Settings [HKEY_USERS\S-1-5-18] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System ->
< CurrentVersion Policy Settings [HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000] > -> HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer ->
HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
\\"NoDriveTypeAutoRun" ->  [221] -> File not found
\\"NoLowDiskSpaceChecks" ->  [1] -> File not found
< CurrentVersion Policy Settings [HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000] > -> HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System ->
HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
\\"LogonHoursAction" ->  [2] -> File not found
\\"DontDisplayLogonHoursWarnings" ->  [1] -> File not found
< Internet Explorer Menu Extensions [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\MenuExt\ ->
Add to Google Photos Screensa&ver -> C:\Windows\System32\GPhotos.scr [res://C:\Windows\system32\GPhotos.scr/200] -> [2013-04-02 15:09:52 | 004,550,656 | ---- | M] (Google Inc.)
< Internet Explorer Menu Extensions [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\MenuExt\ ->
Add to Google Photos Screensa&ver -> C:\Windows\System32\GPhotos.scr [res://C:\Windows\system32\GPhotos.scr/200] -> [2013-04-02 15:09:52 | 004,550,656 | ---- | M] (Google Inc.)
< Internet Explorer Menu Extensions [HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\] > -> HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\Software\Microsoft\Internet Explorer\MenuExt\ ->
Add to Google Photos Screensa&ver -> C:\Windows\System32\GPhotos.scr [res://C:\Windows\system32\GPhotos.scr/200] -> [2013-04-02 15:09:52 | 004,550,656 | ---- | M] (Google Inc.)
< Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ ->
{898EA8C8-E7FF-479B-8935-AEC46303B9E5}:{898EA8C8-E7FF-479B-8935-AEC46303B9E5} [HKLM] -> Reg Error: Key error. [Button: Skype Click to Call] -> File not found
< Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ ->
Extension\.spop -> C:\Program Files\Internet Explorer\PLUGINS\NPDocBox.dll [Reg Error: Value error.] -> [2001-08-01 16:05:42 | 000,270,336 | ---- | M] (Intertrust Technologies, Inc.)
< Default Prefix > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix
"" -> http://
< Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. ->
< Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. ->
< Trusted Sites Domains [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. ->
< Trusted Sites Ranges [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. ->
< Trusted Sites Domains [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. ->
< Trusted Sites Ranges [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. ->
< Trusted Sites Domains [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. ->
< Trusted Sites Ranges [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. ->
< Trusted Sites Domains [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. ->
< Trusted Sites Ranges [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. ->
< Trusted Sites Domains [HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\] > -> HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 4808 domain(s) found. ->
localhost .[http] -> Local intranet ->
< Trusted Sites Ranges [HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\] > -> HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 1 range(s) found. ->
GD [:Range = 127.0.0.1] -> http = Local intranet |  ->
< Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ ->
{6FE79ACA-A498-45E5-8BC4-1B9F380CE468} [HKLM] -> http://www.gamehouse.com/games/abxgh.cab [Reg Error: Key error.] ->
{8AD9C840-044E-11D1-B3E9-00805F499D93} [HKLM] -> http://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab [Java Plug-in 10.25.2] ->
{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} [HKLM] -> http://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab [Java Plug-in 1.7.0_09] ->
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [HKLM] -> http://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab [Java Plug-in 10.25.2] ->
{E2883E8F-472F-4FB0-9522-AC9BF37916A7} [HKLM] -> http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab [Reg Error: Key error.] ->
< Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\ ->
DhcpNameServer -> 192.168.0.1 ->
< Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ ->
{D1292E95-4071-4858-BC72-0F04E305B61E}\\DhcpNameServer -> 192.168.1.1   (Realtek PCIe FE Family Controller) ->
{E6AA8429-10E9-409A-905C-C4EFC07FEB64}\\DhcpNameServer -> 192.168.0.1   (Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter) ->
IE Styles -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Styles
"MaxScriptStatements" -> Reg Error: Invalid data type.
< AppInit_DLLs [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs ->
*AppInit_DLLs* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls ->
c:\progra~1\google\google~2\googledesktopnetwork3.dll -> c:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll -> [2010-09-03 12:11:48 | 000,123,392 | ---- | M] (Google)
*MultiFile Done* -> ->
< Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon ->
*Shell* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell ->
Explorer.exe -> C:\Windows\explorer.exe -> [2009-04-11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation)
*MultiFile Done* -> ->
*UserInit* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\UserInit ->
C:\Windows\system32\userinit.exe -> C:\Windows\System32\userinit.exe -> [2008-01-21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation)
*MultiFile Done* -> ->
< ShellExecuteHooks [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks ->
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}" [HKLM] -> Reg Error: Key error. [] -> File not found
< Domain Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List ->
< Standard Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List ->
< SafeBoot AlternateShell [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot ->
< CDROM Autorun Setting [HKEY_LOCAL_MACHINE]> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom ->
"AutoRun" -> 1 ->
"DisplayName" -> Sterownik stacji dysków CD-ROM ->
"ImagePath" ->  [system32\DRIVERS\cdrom.sys] -> File not found
< Drives with AutoRun files > ->  ->
C:\autoexec.bat [REM Dummy file for NTVDM | ] -> C:\autoexec.bat [ NTFS ] -> [2006-09-18 22:43:36 | 000,000,024 | ---- | M] ()
< MountPoints2 [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 ->
< Registry Shell Spawning - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command ->
comfile [open] -> "%1" %* ->
exefile [open] -> "%1" %* ->
< File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>\ ->
.com [@ = ComFile] -> "%1" %* ->
.exe [@ = exefile] -> "%1" %* ->

[Registry - Additional Scans - Safe List]
< File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>\ ->
.bat [@ = batfile] -> "%1" %* ->
.cmd [@ = cmdfile] -> "%1" %* ->
.com [@ = ComFile] -> "%1" %* ->
.cpl [@ = cplfile] -> rundll32.exe shell32.dll,Control_RunDLL "%1",%* ->
.exe [@ = exefile] -> "%1" %* ->
.hlp [@ = hlpfile] -> C:\Windows\winhlp32.exe -> [2006-11-02 10:45:57 | 000,009,216 | ---- | M] (Microsoft Corporation)
.html [@ = OperaStable] -> Reg Error: Key error. -> File not found
.pif [@ = piffile] -> "%1" %* ->
.scr [@ = scrfile] -> "%1" /S ->
< File Associations - Select to Repair > -> HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\SOFTWARE\Classes\<extension>\ ->
.html [@ = OperaStable] -> Reg Error: Value error. -> File not found
< Protocol Handlers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ ->
skype4com:{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} [HKLM] -> C:\Program Files\Common Files\Skype\Skype4COM.dll[IEProtocolHandler Class] -> [2013-02-26 14:38:30 | 001,996,392 | R--- | M] (Skype Technologies)
< Security Center Settings > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
\\"cval" ->  [1] -> File not found
\\"FirewallDisableNotify" ->  [0] -> File not found
\\"AntiVirusDisableNotify" ->  [0] -> File not found
\\"UpdatesDisableNotify" ->  [0] -> File not found
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\ -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
\Svc\\"AntiVirusOverride" ->  [0] -> File not found
\Svc\\"AntiSpywareOverride" ->  [0] -> File not found
\Svc\\"FirewallOverride" ->  [0] -> File not found
\Svc\\"VistaSp1" -> Reg Error: Unknown registry data type [Reg Error: Unknown registry data type] -> File not found
\Svc\\"VistaSp2" -> Reg Error: Unknown registry data type [Reg Error: Unknown registry data type] -> File not found
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol\ -> ->
< System Restore User Settings > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore ->
"DisableSR" -> 0 ->
< Windows Firewall Group Policy Settings > -> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall ->
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\ -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\ -> ->
< Windows DomainProfile Firewall Policy Settings > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile
\\"EnableFirewall" ->  [1] -> File not found
\\"DisableNotifications" ->  [0] -> File not found
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\ -> ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\ -> ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging\ -> ->
< Windows StandardProfile Firewall Policy Settings > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
\\"EnableFirewall" ->  [1] -> File not found
\\"DisableNotifications" ->  [0] -> File not found
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\ -> ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\ -> ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging\ -> ->
< Windows StandardProfile GloballyOpenPorts Settings > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List ->
< Winsock2 Catalogs [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\ ->
Protocol_Catalog9\Catalog_Entries\000000000001 -> C:\Windows\System32\wpclsp.dll -> [2008-01-21 03:25:26 | 000,072,192 | ---- | M] (Microsoft Corporation)
Protocol_Catalog9\Catalog_Entries\000000000002 -> C:\Windows\System32\wpclsp.dll -> [2008-01-21 03:25:26 | 000,072,192 | ---- | M] (Microsoft Corporation)
Protocol_Catalog9\Catalog_Entries\000000000003 -> C:\Windows\System32\wpclsp.dll -> [2008-01-21 03:25:26 | 000,072,192 | ---- | M] (Microsoft Corporation)
Protocol_Catalog9\Catalog_Entries\000000000004 -> C:\Windows\System32\wpclsp.dll -> [2008-01-21 03:25:26 | 000,072,192 | ---- | M] (Microsoft Corporation)
Protocol_Catalog9\Catalog_Entries\000000000005 -> C:\Windows\System32\wpclsp.dll -> [2008-01-21 03:25:26 | 000,072,192 | ---- | M] (Microsoft Corporation)
Protocol_Catalog9\Catalog_Entries\000000000006 -> C:\Windows\System32\wpclsp.dll -> [2008-01-21 03:25:26 | 000,072,192 | ---- | M] (Microsoft Corporation)
Protocol_Catalog9\Catalog_Entries\000000000007 -> C:\Windows\System32\wpclsp.dll -> [2008-01-21 03:25:26 | 000,072,192 | ---- | M] (Microsoft Corporation)
Protocol_Catalog9\Catalog_Entries\000000000008 -> C:\Windows\System32\wpclsp.dll -> [2008-01-21 03:25:26 | 000,072,192 | ---- | M] (Microsoft Corporation)
Protocol_Catalog9\Catalog_Entries\000000000019 -> C:\Windows\System32\wpclsp.dll -> [2008-01-21 03:25:26 | 000,072,192 | ---- | M] (Microsoft Corporation)
< Default Protocols [HKEY_LOCAL_MACHINE\] - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults ->
ldap -> 4 = Restricted sites (Not a Default Protocol) ->
news -> 4 = Restricted sites (Not a Default Protocol) ->
nntp -> 4 = Restricted sites (Not a Default Protocol) ->
oecmd -> 4 = Restricted sites (Not a Default Protocol) ->
snews -> 4 = Restricted sites (Not a Default Protocol) ->
< Default Protocols [HKEY_USERS\S-1-5-19\] - Select to Repair > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults ->
@ivt -> @ivt protocol not assigned ->
file -> file protocol not assigned ->
ftp -> ftp protocol not assigned ->
http -> http protocol not assigned ->
https -> https protocol not assigned ->
shell -> shell protocol not assigned ->
< Default Protocols [HKEY_USERS\S-1-5-20\] - Select to Repair > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults ->
@ivt -> @ivt protocol not assigned ->
file -> file protocol not assigned ->
ftp -> ftp protocol not assigned ->
http -> http protocol not assigned ->
https -> https protocol not assigned ->
shell -> shell protocol not assigned ->
< Uninstall List [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ ->
{02EBDBB9-4600-41D3-B566-40CB861511D2} -> World of Warcraft FREE Trial
{048298C9-A4D3-490B-9FF9-AB023A9238F3} -> Steam
{0654EA5D-308A-4196-882B-5C09744A5D81} -> Windows Live Photo Common
{0B0F231F-CE6A-483D-AA23-77B364F75917} -> Windows Live Installer
{15BC8CD0-A65B-47D0-A2DD-90A824590FA8} -> Microsoft Works
{18D10072035C4515918F7E37EAFAACFC} -> AutoUpdate
{200FEC62-3C34-4D60-9CE8-EC372E01C08F} -> Windows Live SOXE Definitions
{26A24AE4-039D-4CA4-87B4-2F83217025FF} -> Java 7 Update 25
{26E3C07C-7FF7-4362-9E99-9E49E383CF16} -> Windows Live Writer Resources
{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1 -> ConvertHelper 2.2
{28C2DED6-325B-4CC7-983A-1777C8F7FBAB} -> RealUpgrade 1.1
{2F926AE7-9FB7-4B34-906F-9C29A6D146A7} -> SystemDiagnostics
{3336F667-9049-4D46-98B6-4C743EEBC5B1} -> Windows Live Photo Gallery
{373C3C97-2FA9-4E18-85A2-255060C21045} -> Nero 8 Essentials
{3921A67A-5AB1-4E48-9444-C71814CF3027} -> VCRedistSetup
{39CEE1F2-12B6-4C50-9131-04BFCA110578} -> PowerCinema NE for Everio
{3DE96337-68D2-48E0-A863-6E4A5CD3BC25} -> PC Connectivity Solution
{3FC7CBBC4C1E11DCA1A752EA55D89593} -> DivX Version Checker
{4412F224-3849-4461-A3E9-DEEF8D252790} -> Visual Studio C++ 10.0 Runtime
{4903D172-DCCB-392F-93A3-34CA9D47FE3D} -> Microsoft .NET Framework 4.5.1
{4A03706F-666A-4037-7777-5F2748764D10} -> Java Auto Updater
{4CB0307C-565E-4441-86BE-0DF2E4FB828C} -> Microsoft Games for Windows Marketplace
{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A} -> Windows Live PIMT Platform
{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D} -> Skype™ 6.11
{543E6ACA-51B7-4283-82F2-57C0582A53C5} -> Windows Live UX Platform Language Pack
{56C049BE-79E9-4502-BEA7-9754A3E60F9B} -> neroxml
{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA} -> Segoe UI
{5F624839-947D-46EA-BD63-FD847C1AC6F1} -> BearShare
{612C34C7-5E90-47D8-9B5C-0F717DD82726} -> swMSM
{61AD15B2-50DB-4686-A739-14FE180D4429} -> Windows Live ID Sign-in Assistant
{682B3E4F-696A-42DE-A41C-4C07EA1678B4} -> Windows Live SOXE
{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} -> Windows Media Player Firefox Plugin
{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6} -> MSVC80_x86_v2
{7A9D47BA-6D50-4087-866F-0800D8B89383} -> Podstawowe programy Windows Live
{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F} -> Microsoft Games for Windows - LIVE Redistributable
{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} -> Microsoft Silverlight
{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} -> MSVCRT
{90120000-0016-0409-0000-0000000FF1CE} -> Microsoft Office Excel MUI (English) 2007
{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4} -> Microsoft Office 2007 Service Pack 3 (SP3)
{90120000-0018-0409-0000-0000000FF1CE} -> Microsoft Office PowerPoint MUI (English) 2007
{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4} -> Microsoft Office 2007 Service Pack 3 (SP3)
{90120000-001B-0409-0000-0000000FF1CE} -> Microsoft Office Word MUI (English) 2007
{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4} -> Microsoft Office 2007 Service Pack 3 (SP3)
{90120000-001F-0409-0000-0000000FF1CE} -> Microsoft Office Proof (English) 2007
{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F} -> Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
{90120000-001F-040C-0000-0000000FF1CE} -> Microsoft Office Proof (French) 2007
{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E} -> Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
{90120000-001F-0C0A-0000-0000000FF1CE} -> Microsoft Office Proof (Spanish) 2007
{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC} -> Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
{90120000-0020-0409-0000-0000000FF1CE} -> Compatibility Pack for the 2007 Office system
{90120000-002C-0409-0000-0000000FF1CE} -> Microsoft Office Proofing (English) 2007
{90120000-006E-0409-0000-0000000FF1CE} -> Microsoft Office Shared MUI (English) 2007
{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727} -> Microsoft Office 2007 Service Pack 3 (SP3)
{90120000-00A1-0409-0000-0000000FF1CE} -> Microsoft Office OneNote MUI (English) 2007
{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4} -> Microsoft Office 2007 Service Pack 3 (SP3)
{90120000-0115-0409-0000-0000000FF1CE} -> Microsoft Office Shared Setup Metadata MUI (English) 2007
{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727} -> Microsoft Office 2007 Service Pack 3 (SP3)
{90140000-2005-0000-0000-0000000FF1CE} -> Microsoft Office File Validation Add-In
{91120000-002F-0000-0000-0000000FF1CE} -> Microsoft Office Home and Student 2007
{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93} -> Microsoft Office 2007 Service Pack 3 (SP3)
{92EA4134-10D1-418A-91E1-5A0453131A38} -> Windows Live Movie Maker
{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033 -> Microsoft .NET Framework 4.5.1
{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045 -> Microsoft .NET Framework 4.5.1 (Polski)
{933B4015-4618-4716-A828-5289FC03165F} -> VC80CRTRedist - 8.0.50727.6195
{95120000-00AF-0409-0000-0000000FF1CE} -> Microsoft Office PowerPoint Viewer 2007 (English)
{95120000-00B9-0409-0000-0000000FF1CE} -> Microsoft Application Error Reporting
{9A25302D-30C0-39D9-BD6F-21E6EC160475} -> Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
{9BE518E6-ECC6-35A9-88E4-87755C07200F} -> Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
{A726AE06-AAA3-43D1-87E3-70F510314F04} -> Windows Live Writer
{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} -> Google Update Helper
{A9BDCA6B-3653-467B-AC83-94367DA3BFE3} -> Windows Live Photo Common
{AAAFC670-569B-4A2F-82B4-42945E0DE3EF} -> Windows Live Writer
{AC76BA86-7AD7-1033-7B44-AA1000000001} -> Adobe Reader X (10.1.9)
{AC76BA86-7AD7-5464-3428-900000000004} -> Spelling Dictionaries Support For Adobe Reader 9
{AF111648-99A1-453E-81DD-80DBBF6DAD0D} -> MSVC90_x86
{AFC454ED-A26F-4816-826B-C35129D82E1F} -> Fujitsu Siemens Computers Recovery
{B10914FD-8812-47A4-85A1-50FCDE7F1F33} -> Windows Live Sync
{B2544A03-10D0-4E5E-BA69-0362FFC20D18} -> OGA Notifier 2.0.0048.0
{B7A0CE06-068E-11D6-97FD-0050BACBF861} -> PowerProducer
{C83B8B35-C2C4-3302-9A6E-C2AF1A59E8D6} -> Microsoft .NET Framework 4.5.1 (PLK)
{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431} -> Galeria fotografii usługi Windows Live
{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} -> Microsoft .NET Framework 3.5 SP1
{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2} -> Windows Live UX Platform
{CF9CD37C-E29A-11D5-AE3D-005004B8E30C} -> Digital Photo Navigator 1.5
{CFF8B8E8-E086-4DE0-935F-FE22CAB54F80} -> Microsoft Search Enhancement Pack
{D45240D3-B6B3-4FF9-B243-54ECE3E10066} -> Windows Live Communications Platform
{E09C4DB7-630C-4F06-A631-8EA7239923AF} -> D3DX10
{E55E0C35-AC3C-4683-BA2F-834348577B80} -> Windows Live Writer
{E6D22FE1-AB5F-42CA-9480-6F70B96DDD88} -> Need for Speed™ Undercover
{EDE721EC-870A-11D8-9D75-000129760D75} -> PowerDirector Express
{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8} -> Microsoft SQL Server 2005 Compact Edition [ENU]
{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5} -> Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219
{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} -> Realtek High Definition Audio Driver
{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262} -> Microsoft Office Live Add-in 1.5
{F80E5450-3EF3-4270-B26C-6AC53BEC5E76} -> Windows Live Movie Maker
{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4} -> Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
504244733D18C8F63FF584AEB290E3904E791693 -> Pakiet sterowników systemu Windows - Nokia pccsmcfd  (08/22/2008 7.0.0.0)
Adobe Acrobat 5.0 -> Adobe Acrobat 5.0
Adobe Flash Player Plugin -> Adobe Flash Player 12 Plugin
Adobe Shockwave Player -> Adobe Shockwave Player 11.6
Advanced SystemCare 6_is1 -> Advanced SystemCare 6
Allok 3GP PSP MP4 iPod Video Converter_is1 -> Allok 3GP PSP MP4 iPod Video Converter 6.2.0603
avast -> avast! Free Antivirus
BearShare -> BearShare
CCleaner -> CCleaner
conduitEngine -> Conduit Engine
CWK -> CWK (Czasowy Wyłącznik Komputera)
DAEMON Tools Lite -> DAEMON Tools Lite
Denda Publishers Jewel Quest Mysteries 2 -> Jewel Quest Mysteries 2
ESET Online Scanner -> ESET Online Scanner v3
Gadu-Gadu -> Gadu-Gadu 7.7
Google Desktop -> Google Desktop
HDMI -> Intel(R) Graphics Media Accelerator Driver
HOMESTUDENTR -> Microsoft Office Home and Student 2007
KLiteCodecPack_is1 -> K-Lite Mega Codec Pack 6.4.0
Microsoft .NET Framework 3.5 SP1 -> Microsoft .NET Framework 3.5 SP1
Mozilla Firefox 23.0.1 (x86 pl) -> Mozilla Firefox 23.0.1 (x86 pl)
MozillaMaintenanceService -> Mozilla Maintenance Service
Mpeg2Decoder_is1 -> Mpeg2Decoder 1.3
MyTomTom -> MyTomTom 3.2.0.700
Niezbędnik CD_is1 -> Niezbędnik CD
NVIDIA Drivers -> NVIDIA Drivers
OpenAL -> OpenAL
Opera 12.15.1748 -> Opera 12.15
Picasa 3 -> Picasa 3
Revo Uninstaller -> Revo Uninstaller 1.94
Unlocker -> Unlocker 1.9.1
VideoCommunity Toolbar -> VideoCommunity Toolbar
VLC media player -> VLC media player 2.0.7
Windows Media Encoder 7 -> Windows Media Encoder 7.1
WinLiveSuite -> Podstawowe programy Windows Live
WinRAR archiver -> Archiwizator WinRAR
WMV9_VCM -> Microsoft Windows Media Video 9 VCM
< Uninstall List [HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\] > -> HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ ->
GG -> GG
Google Chrome -> Google Chrome
Google Translator -> Google Translator
Google Translator (2) -> Google Translator (2)
OpenFM -> OpenFM
Spotify -> Spotify
UnityWebPlayer -> Unity Web Player
< EventViewer Logs - Last 10 Errors > -> Event Information -> Description
Application [ Error ] 2014-02-15 08:52:58 Computer Name = martula-PC | Source = WinMgmt | ID = 10 -> Description =
Application [ Error ] 2014-02-15 18:28:12 Computer Name = martula-PC | Source = WinMgmt | ID = 10 -> Description =
Application [ Error ] 2014-02-28 17:07:07 Computer Name = martula-PC | Source = WinMgmt | ID = 10 -> Description =
Application [ Error ] 2014-02-28 17:28:37 Computer Name = martula-PC | Source = Application Error | ID = 1000 -> Description = Aplikacja powodująca błąd DllHost.exe, wersja 6.0.6000.16386, sygnatura czasowa 0x4549b14e, moduł powodujący błąd wscui.cpl_unloaded, wersja 0.0.0.0, sygnatura czasowa 0x49e03846, kod wyjątku 0xc0000005, przesunięcie błędu 0x6911d30f,  identyfikator procesu 0x1074, godzina rozpoczęcia aplikacji 0x01cf34c98ba7821b.
Application [ Error ] 2014-03-06 18:02:58 Computer Name = martula-PC | Source = WinMgmt | ID = 10 -> Description =
Application [ Error ] 2014-03-06 18:14:42 Computer Name = martula-PC | Source = .NET Runtime Optimization Service | ID = 1101 -> Description =
Application [ Error ] 2014-03-07 20:23:27 Computer Name = martula-PC | Source = WinMgmt | ID = 10 -> Description =
Application [ Error ] 2014-03-24 18:33:17 Computer Name = martula-PC | Source = WinMgmt | ID = 10 -> Description =
Application [ Error ] 2014-03-24 19:34:20 Computer Name = martula-PC | Source = WinMgmt | ID = 10 -> Description =
Application [ Error ] 2014-03-24 21:39:57 Computer Name = martula-PC | Source = WinMgmt | ID = 10 -> Description =
System [ Error ] 2014-02-28 17:07:56 Computer Name = martula-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001 -> Description =
System [ Error ] 2014-03-06 18:09:54 Computer Name = martula-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001 -> Description =
System [ Error ] 2014-03-06 18:20:23 Computer Name = martula-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20 -> Description =
System [ Error ] 2014-03-07 20:26:06 Computer Name = martula-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001 -> Description =
System [ Error ] 2014-03-24 18:34:10 Computer Name = martula-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001 -> Description =
System [ Error ] 2014-03-24 18:49:43 Computer Name = martula-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20 -> Description =
System [ Error ] 2014-03-24 19:23:54 Computer Name = martula-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20 -> Description =
System [ Error ] 2014-03-24 19:37:04 Computer Name = martula-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001 -> Description =
System [ Error ] 2014-03-24 21:41:27 Computer Name = martula-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001 -> Description =
System [ Error ] 2014-03-25 02:30:05 Computer Name = martula-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20 -> Description =

[Files/Folders - Created Within 30 Days]
FRST -> C:\FRST -> [2014-03-25 13:01:15 | 000,000,000 | ---D | C]
FRST.exe -> C:\Users\martula\Desktop\FRST.exe -> [2014-03-25 12:59:53 | 001,145,856 | ---- | C] (Farbar)
ESET -> C:\Program Files\ESET -> [2014-03-25 08:20:14 | 000,000,000 | ---D | C]
esetsmartinstaller_plk.exe -> C:\Users\martula\Desktop\esetsmartinstaller_plk.exe -> [2014-03-25 08:19:07 | 002,347,384 | ---- | C] (ESET)
msfeeds.dll -> C:\Windows\System32\msfeeds.dll -> [2014-03-25 00:03:21 | 000,607,744 | ---- | C] (Microsoft Corporation)
jsproxy.dll -> C:\Windows\System32\jsproxy.dll -> [2014-03-25 00:03:21 | 000,065,536 | ---- | C] (Microsoft Corporation)
mshtml.tlb -> C:\Windows\System32\mshtml.tlb -> [2014-03-25 00:03:20 | 002,382,848 | ---- | C] (Microsoft Corporation)
ieui.dll -> C:\Windows\System32\ieui.dll -> [2014-03-25 00:03:20 | 000,176,640 | ---- | C] (Microsoft Corporation)
jscript9.dll -> C:\Windows\System32\jscript9.dll -> [2014-03-25 00:03:19 | 001,806,848 | ---- | C] (Microsoft Corporation)
inetcpl.cpl -> C:\Windows\System32\inetcpl.cpl -> [2014-03-25 00:03:19 | 001,427,968 | ---- | C] (Microsoft Corporation)
url.dll -> C:\Windows\System32\url.dll -> [2014-03-25 00:03:19 | 000,231,936 | ---- | C] (Microsoft Corporation)
ieUnatt.exe -> C:\Windows\System32\ieUnatt.exe -> [2014-03-25 00:03:19 | 000,142,848 | ---- | C] (Microsoft Corporation)
win32k.sys -> C:\Windows\System32\win32k.sys -> [2014-03-24 23:49:31 | 002,050,560 | ---- | C] (Microsoft Corporation)
qedit.dll -> C:\Windows\System32\qedit.dll -> [2014-03-24 23:49:29 | 000,505,344 | ---- | C] (Microsoft Corporation)
wer.dll -> C:\Windows\System32\wer.dll -> [2014-03-24 23:49:28 | 000,876,032 | ---- | C] (Microsoft Corporation)
tzres.dll -> C:\Windows\System32\tzres.dll -> [2014-03-24 23:48:23 | 000,002,048 | ---- | C] (Microsoft Corporation)
Migration -> C:\Windows\Migration -> [2014-03-06 23:09:57 | 000,000,000 | ---D | C]
5 C:\Windows\*.tmp files -> C:\Windows\*.tmp ->
4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp ->

[Files/Folders - Modified Within 30 Days]
GoogleUpdateTaskMachineUA.job -> C:\Windows\tasks\GoogleUpdateTaskMachineUA.job -> [2014-03-25 14:10:00 | 000,001,036 | ---- | M] ()
GoogleUpdateTaskUserS-1-5-21-614805977-2590222267-3122971048-1000UA.job -> C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-614805977-2590222267-3122971048-1000UA.job -> [2014-03-25 14:05:00 | 000,001,066 | ---- | M] ()
GoogleUpdateTaskUserS-1-5-21-614805977-2590222267-3122971048-501UA.job -> C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-614805977-2590222267-3122971048-501UA.job -> [2014-03-25 13:25:59 | 000,001,058 | ---- | M] ()
7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 -> C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 -> [2014-03-25 13:20:52 | 000,003,216 | ---- | M] ()
7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 -> C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 -> [2014-03-25 13:20:52 | 000,003,216 | ---- | M] ()
Adobe Flash Player Updater.job -> C:\Windows\tasks\Adobe Flash Player Updater.job -> [2014-03-25 13:15:00 | 000,000,930 | ---- | M] ()
FRST.exe -> C:\Users\martula\Desktop\FRST.exe -> [2014-03-25 13:00:03 | 001,145,856 | ---- | M] (Farbar)
bootstat.dat -> C:\Windows\bootstat.dat -> [2014-03-25 09:04:50 | 000,067,584 | --S- | M] ()
esetsmartinstaller_plk.exe -> C:\Users\martula\Desktop\esetsmartinstaller_plk.exe -> [2014-03-25 08:19:36 | 002,347,384 | ---- | M] (ESET)
Google Chrome.lnk -> C:\Users\martula\Desktop\Google Chrome.lnk -> [2014-03-25 07:38:36 | 000,002,064 | ---- | M] ()
GoogleUpdateTaskMachineCore1cf16fdb4b0e2f0.job -> C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf16fdb4b0e2f0.job -> [2014-03-25 07:35:42 | 000,001,032 | ---- | M] ()
perfh009.dat -> C:\Windows\System32\perfh009.dat -> [2014-03-25 07:27:49 | 000,634,484 | ---- | M] ()
perfc009.dat -> C:\Windows\System32\perfc009.dat -> [2014-03-25 07:27:49 | 000,120,050 | ---- | M] ()
Wise Care 365.job -> C:\Windows\tasks\Wise Care 365.job -> [2014-03-25 07:21:32 | 000,000,402 | ---- | M] ()
FNTCACHE.DAT -> C:\Windows\System32\FNTCACHE.DAT -> [2014-03-25 00:33:43 | 000,307,400 | ---- | M] ()
FlashPlayerApp.exe -> C:\Windows\System32\FlashPlayerApp.exe -> [2014-03-25 00:15:55 | 000,692,616 | ---- | M] (Adobe Systems Incorporated)
FlashPlayerCPLApp.cpl -> C:\Windows\System32\FlashPlayerCPLApp.cpl -> [2014-03-25 00:15:55 | 000,071,048 | ---- | M] (Adobe Systems Incorporated)
msfeeds.dll -> C:\Windows\System32\msfeeds.dll -> [2014-03-25 00:03:21 | 000,607,744 | ---- | M] (Microsoft Corporation)
jsproxy.dll -> C:\Windows\System32\jsproxy.dll -> [2014-03-25 00:03:21 | 000,065,536 | ---- | M] (Microsoft Corporation)
mshtml.tlb -> C:\Windows\System32\mshtml.tlb -> [2014-03-25 00:03:20 | 002,382,848 | ---- | M] (Microsoft Corporation)
ieui.dll -> C:\Windows\System32\ieui.dll -> [2014-03-25 00:03:20 | 000,176,640 | ---- | M] (Microsoft Corporation)
jscript9.dll -> C:\Windows\System32\jscript9.dll -> [2014-03-25 00:03:19 | 001,806,848 | ---- | M] (Microsoft Corporation)
inetcpl.cpl -> C:\Windows\System32\inetcpl.cpl -> [2014-03-25 00:03:19 | 001,427,968 | ---- | M] (Microsoft Corporation)
url.dll -> C:\Windows\System32\url.dll -> [2014-03-25 00:03:19 | 000,231,936 | ---- | M] (Microsoft Corporation)
ieUnatt.exe -> C:\Windows\System32\ieUnatt.exe -> [2014-03-25 00:03:19 | 000,142,848 | ---- | M] (Microsoft Corporation)
GoogleUpdateTaskUserS-1-5-21-614805977-2590222267-3122971048-1000Core.job -> C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-614805977-2590222267-3122971048-1000Core.job -> [2014-03-07 01:05:00 | 000,001,014 | ---- | M] ()
5 C:\Windows\*.tmp files -> C:\Windows\*.tmp ->
4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp ->
24 C:\Users\martula\AppData\Local\temp\*.tmp files -> C:\Users\martula\AppData\Local\temp\*.tmp ->

[Files - No Company Name]
unins000.dat -> C:\Windows\unins000.dat -> [2013-09-01 21:27:36 | 000,000,712 | ---- | C] ()
aswVmm.sys -> C:\Windows\System32\drivers\aswVmm.sys -> [2013-03-05 11:04:13 | 000,180,248 | ---- | C] ()
aswRvrt.sys -> C:\Windows\System32\drivers\aswRvrt.sys -> [2013-03-05 11:04:12 | 000,049,944 | ---- | C] ()
PnkBstrA.exe -> C:\Windows\System32\PnkBstrA.exe -> [2012-10-20 15:40:16 | 000,066,872 | ---- | C] ()
PnkBstrK.sys -> C:\Windows\System32\drivers\PnkBstrK.sys -> [2012-10-20 15:39:48 | 000,138,184 | ---- | C] ()
PnkBstrB.exe -> C:\Windows\System32\PnkBstrB.exe -> [2012-10-20 15:39:42 | 000,183,112 | ---- | C] ()

[Alternate Data Streams]
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:D1B5B4F1
@Alternate Data Stream - 135 bytes -> C:\ProgramData\TEMP:F1B6FD2F
@Alternate Data Stream - 55920 bytes -> C:\ProgramData:$SS_DESCRIPTOR_LVVWVBGV0VFBTLX4D06YH7LVUTPXGJMBKE1R0WT1VH7E24F7PHCTVF4VMVFVVX4VM
< End of report >


[NieWiem]

Nie tutaj jest problem, ale raczej leży w IOBit Advanced System Care.
Odinstaluj go z Panelu Sterowania.

Następnie uruchom OTS jako administrator. W oknie Paste Fix Here wklej zawartość ramki:

Kod: Zaznacz wszystko

[Kill All Processes]
[Unregister Dlls]
[Processes - Safe List]
YN -> frst.exe -> C:\Users\martula\Desktop\FRST.exe
[Driver Services - Safe List]
YY -> (1472345drv) 1472345drv [File_System | Unknown | Running] ->
YY -> (07529244) 07529244 [Kernel | Unknown | Running] ->
[Registry - Safe List]
< Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > ->
YN -> HKEY_LOCAL_MACHINE\: URLSearchHooks\\"{ae75cea9-579a-43e7-8d22-4d5dea612c5c}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
< Internet Explorer Settings [HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\] > ->
YN -> HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\: URLSearchHooks\\"{ae75cea9-579a-43e7-8d22-4d5dea612c5c}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YN -> HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\: URLSearchHooks\\"{cd90bf73-20f6-44ef-993d-bb920303bd2e}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YN -> HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\: URLSearchHooks\\"{ce0c2586-da36-452b-acdb-320d9bcb19bf}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YN -> HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\: "ProxyServer" -> socks=
< BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
YN -> {02478D38-C3F9-4efb-9B51-7695ECA05670} [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YN -> {3049C3E9-B461-4BC5-8870-4C09146192CA} [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YY -> {30F9B915-B755-4826-820B-08FBA6BD249D} [HKLM] -> C:\Program Files\ConduitEngine\prxConduitEngine.dll [Conduit Engine ]
YN -> {99079a25-328f-4bd4-be04-00955acaa0a7} [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YN -> {ae75cea9-579a-43e7-8d22-4d5dea612c5c} [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YN -> {CA4520F3-AE13-4FB1-A513-58E23991C86D} [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
< Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar
YY -> "{30F9B915-B755-4826-820B-08FBA6BD249D}" [HKLM] -> C:\Program Files\ConduitEngine\prxConduitEngine.dll [Conduit Engine ]
YN -> "10" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
< Internet Explorer ToolBars [HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\] > -> HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\Software\Microsoft\Internet Explorer\Toolbar\
YN -> WebBrowser\\"{21FA44EF-376D-4D53-9B0F-8A89D3229068}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YN -> WebBrowser\\"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YY -> WebBrowser\\"{30F9B915-B755-4826-820B-08FBA6BD249D}" [HKLM] -> C:\Program Files\ConduitEngine\prxConduitEngine.dll [Conduit Engine ]
YN -> WebBrowser\\"{AE75CEA9-579A-43E7-8D22-4D5DEA612C5C}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YN -> WebBrowser\\"{CD90BF73-20F6-44EF-993D-BB920303BD2E}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YN -> WebBrowser\\"{CE0C2586-DA36-452B-ACDB-320D9BCB19BF}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
< CurrentVersion Policy Settings [HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000] > -> HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
YN -> \\"NoLowDiskSpaceChecks" -> [1]
< CurrentVersion Policy Settings [HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000] > -> HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
YN -> HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System ->
YN -> \\"LogonHoursAction" -> [2]
YN -> \\"DontDisplayLogonHoursWarnings" -> [1]
< Internet Explorer Menu Extensions [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\MenuExt\
YN -> Add to Google Photos Screensa&ver -> C:\Windows\System32\GPhotos.scr [res://C:\Windows\system32\GPhotos.scr/200]
< Internet Explorer Menu Extensions [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\MenuExt\
YN -> Add to Google Photos Screensa&ver -> C:\Windows\System32\GPhotos.scr [res://C:\Windows\system32\GPhotos.scr/200]
< Internet Explorer Menu Extensions [HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\] > -> HKEY_USERS\S-1-5-21-614805977-2590222267-3122971048-1000\Software\Microsoft\Internet Explorer\MenuExt\
YN -> Add to Google Photos Screensa&ver -> C:\Windows\System32\GPhotos.scr [res://C:\Windows\system32\GPhotos.scr/200]
< Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\
YN -> {898EA8C8-E7FF-479B-8935-AEC46303B9E5}:{898EA8C8-E7FF-479B-8935-AEC46303B9E5} [HKLM] -> Reg Error: Key error. [Button: Skype Click to Call]
< Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\
YN -> "MaxScriptStatements" -> Reg Error: Invalid data type.
< ShellExecuteHooks [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
YN -> "{AEB6717E-7E19-11d0-97EE-00C04FD91972}" [HKLM] -> Reg Error: Key error. []
[Files/Folders - Modified Within 30 Days]
NY -> Wise Care 365.job -> C:\Windows\tasks\Wise Care 365.job
NY -> 5 C:\Windows\*.tmp files -> C:\Windows\*.tmp
NY -> 4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp
NY -> 24 C:\Users\martula\AppData\Local\temp\*.tmp files -> C:\Users\martula\AppData\Local\temp\*.tmp
[Alternate Data Streams]
NY -> @Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:D1B5B4F1
NY -> @Alternate Data Stream - 135 bytes -> C:\ProgramData\TEMP:F1B6FD2F
NY -> @Alternate Data Stream - 55920 bytes -> C:\ProgramData:$SS_DESCRIPTOR_LVVWVBGV0VFBTLX4D06YH7LVUTPXGJMBKE1R0WT1VH7E24F7PHCTVF4VMVFVVX4VM
[Empty Temp Folders]
[EmptyFlash]
[EmptyJava]
[CreateRestorePoint]
[Reboot]

Wciśnij Run Fix, po czym zgódź się na restart komputera.

Po restarcie proszę pobrać świeżą kopię narzędzia FRST i wygenerować z niego raport.

[zalamana 6969]

TZ MAM CALY PROGRAM ODINSTALOWAC CZY TYLKO IOBIT?

[NieWiem]

Wszystko co ma coś wspólnego z IOBit.

[zalamana 6969]

Oto raport

Dodano Dzisiaj, 15:44:
Jak teraz to wyglada bo jak ten proces byl to w miedzyczasie ten program OTS przestal dzialac i ekran zronil sie mleczny wiec wylaczylam laptopa recznie.Nie mam pojecia jaki efekt tego bedzie

[NieWiem]

Bardzo proszę mnie nie poganiać poprzez wiadomości, bo ja nie jestem tutaj na niczyje usługi i pomagam kiedy ja mam na to czas. Wiem, że frustrujące jest mieć niedziałający właściwie sprzęt, ale uszanuj mój poświecany DOBROWOLNIE czas na pomoc innym.

Pobierz GMER i zapisz do na pulpicie.
Jeśli posiadasz wirtualne napędy, to zrób z nimi porządek zgodnie z tym tematem.

Uruchom GMERa z prawokliku jako administrator.
Gdy skończy się pre-skan, w małym oknie zaznacz C: oraz upewnij się, że opcja 3rd party NIE JEST zaznaczona.
Kliknij Szukaj i w międzyczasie nie rób nic więcej na komputerze. Ten ma skan może trwać długo, ale musi przelecieć spokojnie i możliwie bez przeszkód.

Na zakończenie zapisz raport i przeklej go.
Prawdopodobnie będziesz musiała zmienić rozszerzenie zapisanego pliku z *.log na *.txt.