Wykrywa zagrożenie przy otwieraniu przeglądarki

**Posty:** 448 · przez **kamiledi15** 15 Cze 2011, 17:08

Od jakiegoś czasu przy każdym uruchomieniu Firefoxa wyskakuje mi komunikat:

Od wielu lat używam darmowego AVG i jak dotąd sprawdza się znakomicie. Przeskanowałem system, coś tam znalazł i usunął, ale nadal mam ten komunikat. Jak się tego pozbyć? Co ciekawe w folderze c:\documents and settings\użytkownik nie mam folderu Dane Aplikacji, w którym podobno to coś się znajduje. Całkowite wyczyszczenie historii przeglądania też nic nie dało.

**Posty:** 18165 · przez **wojtas** 16 Cze 2011, 16:03

daj 3 obowiązkowe logi zobaczymy co jest

**Posty:** 448 · przez **kamiledi15** 16 Cze 2011, 17:59

OTL:

Kod: Zaznacz wszystko: OTL logfile created on: 2011-06-16 17:39:35 - Run 3 OTL by OldTimer - Version 3.2.24.0 Folder = C:\Documents and Settings\Użytkownik\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,50 Gb Total Physical Memory | 2,56 Gb Available Physical Memory | 73,03% Memory free 7,34 Gb Paging File | 6,52 Gb Available in Paging File | 88,82% Paging File free Paging file location(s): [Binary data over 100 bytes] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 97,65 Gb Total Space | 4,51 Gb Free Space | 4,62% Space Free | Partition Type: NTFS Drive E: | 97,65 Gb Total Space | 77,88 Gb Free Space | 79,75% Space Free | Partition Type: NTFS Drive F: | 102,77 Gb Total Space | 12,77 Gb Free Space | 12,42% Space Free | Partition Type: NTFS Computer Name: W-4E1E25B952BE4 | User Name: Użytkownik | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-06-16 17:29:24 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Użytkownik\Pulpit\OTL.exe PRC - [2011-05-11 18:41:10 | 003,373,968 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe PRC - [2011-04-29 23:36:58 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2011-04-18 17:40:08 | 002,334,560 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgtray.exe PRC - [2011-04-18 17:39:42 | 007,398,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe PRC - [2011-04-14 05:36:42 | 001,080,672 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgnsx.exe PRC - [2011-04-08 07:14:00 | 002,218,600 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe PRC - [2011-03-28 03:00:52 | 000,351,072 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgcsrvx.exe PRC - [2011-03-16 16:05:14 | 000,656,736 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgchsvx.exe PRC - [2011-02-10 07:55:18 | 001,148,256 | ---- | M] () -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe PRC - [2011-02-09 05:35:14 | 001,265,504 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgsrmax.exe PRC - [2011-02-08 05:33:42 | 000,269,520 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgwdsvc.exe PRC - [2011-02-08 05:33:20 | 000,658,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgrsx.exe PRC - [2011-01-05 22:23:48 | 000,222,568 | ---- | M] (Teruten) -- C:\WINDOWS\system32\FsUsbExService.Exe PRC - [2010-12-16 07:19:28 | 012,984,928 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe PRC - [2010-05-14 12:44:46 | 000,501,480 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2004-06-30 13:45:46 | 018,026,496 | ---- | M] (Adobe Systems, Incorporated) -- C:\Program Files\Adobe\Photoshop CS\Photoshop.exe PRC - [2002-05-05 20:32:00 | 000,162,304 | ---- | M] () -- C:\Program Files\ePSXe\ePSXe.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-06-16 17:29:24 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Użytkownik\Pulpit\OTL.exe MOD - [2010-08-23 18:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- -- (HidServ) SRV - [2011-04-18 17:39:42 | 007,398,752 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent) SRV - [2011-04-08 07:14:00 | 002,218,600 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2011-02-08 05:33:42 | 000,269,520 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\avgwdsvc.exe -- (avgwd) SRV - [2011-01-05 22:23:48 | 000,222,568 | ---- | M] (Teruten) [Auto | Running] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService) SRV - [2007-09-04 20:25:44 | 000,131,072 | ---- | M] (NVIDIA) [Disabled | Stopped] -- C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe -- (nTuneService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-04-17 13:59:40 | 000,443,448 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2011-04-14 21:28:42 | 000,134,480 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver) DRV - [2011-04-05 00:59:56 | 000,297,168 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (Avgtdix) DRV - [2011-03-16 16:03:20 | 000,032,592 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\avgrkx86.sys -- (Avgrkx86) DRV - [2011-03-01 14:25:18 | 000,034,896 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (Avgmfx86) DRV - [2011-02-22 08:13:02 | 000,022,992 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys -- (AVGIDSEH) DRV - [2011-02-10 07:53:54 | 000,027,216 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSShim.sys -- (AVGIDSShim) DRV - [2011-02-10 07:53:52 | 000,024,144 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter) DRV - [2011-01-07 06:41:46 | 000,248,656 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (Avgldx86) DRV - [2011-01-05 22:23:40 | 000,042,112 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk) DRV - [2011-01-04 16:10:54 | 000,018,120 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\dgderdrv.sys -- (dgderdrv) DRV - [2011-01-03 10:38:36 | 000,136,680 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdm.sys -- (ssadmdm) DRV - [2011-01-03 10:38:36 | 000,121,192 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM) DRV - [2011-01-03 10:38:36 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter) DRV - [2010-12-21 07:55:02 | 000,132,424 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdm.sys -- (sscdmdm) DRV - [2010-12-21 07:55:02 | 000,104,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM) DRV - [2010-12-21 07:55:02 | 000,014,920 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdfl.sys -- (sscdmdfl) DRV - [2010-09-13 17:29:08 | 000,281,504 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt) DRV - [2010-09-13 17:29:08 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt) DRV - [2010-04-08 20:30:10 | 000,168,040 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvgts.sys -- (nvgts) DRV - [2010-03-04 12:02:10 | 000,013,824 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus) DRV - [2010-03-04 12:02:08 | 000,070,912 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD) DRV - [2010-02-03 16:56:56 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2009-11-19 14:33:20 | 000,051,200 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ser2pl.sys -- (Ser2pl) DRV - [2009-08-05 21:37:04 | 000,039,112 | ---- | M] (GBM Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\GRemoteJoy.sys -- (GRemoteJoy) DRV - [2009-08-05 21:37:04 | 000,023,368 | ---- | M] (GBM Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\GRemoteBus.sys -- (GRemoteBus) DRV - [2008-12-11 11:24:20 | 004,959,232 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2008-08-24 13:55:50 | 000,030,464 | ---- | M] (CamTrax Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CamSpaceJoy.sys -- (CamSpaceJoy) DRV - [2008-08-24 13:55:48 | 000,014,848 | ---- | M] (CamTrax Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CamSpaceBus.sys -- (CamSpaceBus) DRV - [2008-01-15 21:50:50 | 000,459,520 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rt73.sys -- (RT73) DRV - [2007-09-04 20:26:32 | 000,029,696 | ---- | M] (NVidia Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\nvoclock.sys -- (NVR0Dev) DRV - [2007-06-29 14:47:34 | 000,034,304 | ---- | M] (AMD, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AmdLLD.sys -- (AmdLLD) DRV - [2006-07-01 23:32:26 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8) DRV - [2004-10-24 08:11:00 | 000,028,800 | ---- | M] (Deon van der Westhuysen) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PPortJoy.sys -- (PPortJoystick) DRV - [2004-10-24 08:11:00 | 000,013,952 | ---- | M] (Deon van der Westhuysen) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PPJoyBus.sys -- (PPJoyBus) DRV - [2002-07-17 10:05:10 | 000,016,512 | ---- | M] (Adaptec) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ASPI32.SYS -- (ASPI) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/ IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://google.pl/" FF - prefs.js..extensions.enabledItems: YoutubeDownloader@PeterOlayev.com:1.5 FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:10.0.0.1374 FF - prefs.js..extensions.enabledItems: firefox-plugin@camspace.com:1.0.1.35 FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG10\Firefox\ [2011-05-11 11:04:26 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG10\Firefox4\ [2011-06-03 14:08:10 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.19\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-05-07 14:42:43 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.19\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-04-29 23:36:59 | 000,000,000 | ---D | M] [2009-12-15 17:49:56 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Extensions [2011-06-16 17:04:41 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\v9964hli.default\extensions [2011-06-14 15:27:46 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\v9964hli.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011-06-14 15:27:44 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\v9964hli.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2010-09-23 11:55:28 | 000,000,000 | ---D | M] (CamSpace plugin for Firefox) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\v9964hli.default\extensions\firefox-plugin@camspace.com [2011-06-14 15:27:45 | 000,000,000 | ---D | M] (1-Click YouTube Video Downloader) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\v9964hli.default\extensions\YoutubeDownloader@PeterOlayev.com [2011-06-15 16:22:39 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-01-29 15:18:28 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽYTKOWNIK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\V9964HLI.DEFAULT\EXTENSIONS\{20A82645-C095-46ED-80E3-08825760534B} File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽYTKOWNIK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\V9964HLI.DEFAULT\EXTENSIONS\{B9DB16A4-6EDC-47EC-A1F4-B86292ED211D} File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽYTKOWNIK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\V9964HLI.DEFAULT\EXTENSIONS\FIREFOX-PLUGIN@CAMSPACE.COM File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽYTKOWNIK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\V9964HLI.DEFAULT\EXTENSIONS\YOUTUBEDOWNLOADER@PETEROLAYEV.COM [2011-05-11 11:04:26 | 000,000,000 | ---D | M] (AVG Safe Search) -- C:\PROGRAM FILES\AVG\AVG10\FIREFOX [2009-10-26 18:51:28 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2010-11-12 19:53:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll [2010-12-11 15:11:40 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2010-12-11 15:11:40 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2010-12-11 15:11:40 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2010-12-11 15:11:40 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2010-12-11 15:11:40 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2010-12-11 15:11:40 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2010-09-26 00:20:12 | 000,001,054 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 static3.cdn.ubi.com O1 - Hosts: 127.0.0.1 ubisoft-orbit.s3.amazonaws.com O1 - Hosts: 127.0.0.1 onlineconfigservice.ubi.com O1 - Hosts: 127.0.0.1 orbitservice.ubi.com O1 - Hosts: 127.0.0.1 ubisoft-orbit-savegames.s3.amazonaws.com O2 - BHO: (FGCatchUrl) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll (www.flashget.com) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (FlashGet GetFlash Class) - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll (www.flashget.com) O2 - BHO: (SMTTB2009 Class) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\HyperCam Toolbar\tbcore3.dll () O3 - HKLM\..\Toolbar: (HyperCam Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\HyperCam Toolbar\tbcore3.dll () O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe () O4 - HKCU..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKCU..\Run: [KiesHelper] C:\Program Files\Samsung\Kies\KiesHelper.exe (Samsung) O4 - HKCU..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.) O4 - HKCU..\Run: [NVIDIA nTune] C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe (NVIDIA) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\JC_ALL.HTM () O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\JC_LINK.HTM () O8 - Extra context menu item: Download by FlashGet3 - C:\Documents and Settings\Użytkownik\Dane aplikacji\FlashGetBHO\GetUrl.htm () O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.152.34 194.204.159.1 O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKCU Winlogon: Shell - (c:\documents and settings\użytkownik\dane aplikacji\hotfix.exe) - File not found O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-09-27 12:20:20 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{6eeba7f8-af66-11de-83a2-0008a1b74f2b}\Shell - "" = AutoRun O33 - MountPoints2\{6eeba7f8-af66-11de-83a2-0008a1b74f2b}\Shell\AutoRun\command - "" = I:\LaunchU3.exe -a O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync) - C:\Program Files\AVG\AVG10\avgchsvx.exe (AVG Technologies CZ, s.r.o.) O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart) - C:\Program Files\AVG\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-06-16 17:29:16 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Użytkownik\Pulpit\OTL.exe [2011-06-16 15:37:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood [2011-06-10 17:22:54 | 000,000,000 | ---D | C] -- C:\Fraps [2011-06-10 17:22:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Menu Start\Programy\Fraps [2011-06-10 17:22:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Pulpit\FRAPS 2.9.5 FULL byHunter [2011-06-10 16:06:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Game Cam v1.4.0.5 [2011-06-10 16:06:30 | 000,000,000 | ---D | C] -- C:\Program Files\Game Cam v1.4.0.5 [2011-06-10 15:15:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\gctmp [2011-06-10 15:15:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\Xenocode [2011-06-10 14:57:12 | 000,309,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmv8dmod.dll [2011-06-10 14:57:12 | 000,241,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mp4sds32.ax [2011-06-10 14:38:00 | 000,000,000 | ---D | C] -- C:\Program Files\HyperCam Toolbar [2011-05-31 16:35:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Pulpit\ekotoksykologia [2011-05-26 23:10:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\.thumbnails [2011-05-26 23:10:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\gtk-2.0 [2011-05-26 23:09:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Moje dokumenty\gegl-0.0 [2011-05-26 23:09:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\.gimp-2.6 [2011-05-26 23:09:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\GIMP [2011-05-26 23:09:35 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP-2.0 [2011-05-22 22:24:59 | 000,944,232 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvdispco3220140.dll [2011-05-22 22:24:59 | 000,855,656 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvgenco322060.dll [2011-05-22 21:27:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood(2) [2011-05-21 16:44:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\DisneyInteractiveStudios [2011-05-20 17:51:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Moje dokumenty\Witcher 2 [2011-05-20 17:51:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\The Witcher 2 [2011-05-20 17:47:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Wiedźmin 2 [2011-05-18 14:27:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\DAEMON Tools Lite [2011-05-18 14:27:16 | 000,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite [2010-07-31 23:15:42 | 009,963,457 | ---- | C] (Boilsoft, Inc. ) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\bsvideojoiner.exe [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-06-16 17:32:42 | 000,002,498 | ---- | M] () -- C:\WINDOWS\kaillera.ini [2011-06-16 17:29:24 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Użytkownik\Pulpit\OTL.exe [2011-06-16 15:34:54 | 118,781,877 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm [2011-06-16 15:29:25 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-06-16 15:29:05 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-06-15 17:05:49 | 000,018,545 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\bez tytułu.JPG [2011-06-13 17:29:25 | 000,038,912 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-06-12 17:17:39 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2011-06-11 23:11:21 | 004,059,184 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\Ggwru94iKkIx.128.mp3 [2011-06-11 14:14:57 | 000,061,340 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\witcher2 2011-06-11 14-12-44-90.JPG [2011-06-10 21:38:29 | 000,072,802 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\snapshot20110610213824.bmp.jpg [2011-06-10 19:35:11 | 001,146,442 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\bez tytułu.bmp [2011-06-10 17:22:55 | 000,000,488 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\Fraps.lnk [2011-06-10 17:22:38 | 003,484,677 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\FRAPS 2.9.5 FULL.exe [2011-06-10 16:06:32 | 003,540,813 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\PanelTweaks-87-1-1.zip [2011-06-10 16:06:32 | 000,001,787 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Profile Manager.lnk [2011-06-10 16:06:32 | 000,001,750 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Game Cam.lnk [2011-06-10 16:05:42 | 003,549,172 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\GameCam_v1.4.0.5_Registered.rar [2011-06-04 14:33:57 | 000,096,391 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\Obraz.png [2011-06-03 14:08:11 | 000,000,720 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\AVG 2011.lnk [2011-05-31 20:42:59 | 000,667,344 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\mp3gain-win-1_2_5.exe [2011-05-30 19:16:39 | 000,022,554 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\seminarium.pdf [2011-05-27 18:56:31 | 000,031,941 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\mk3-10355.wma [2011-05-27 18:55:37 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Użytkownik\mk3-10355.wma [2011-05-27 15:53:35 | 000,000,873 | ---- | M] () -- C:\Documents and Settings\Użytkownik\.recently-used.xbel [2011-05-26 23:09:51 | 000,000,796 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\GIMP 2.lnk [2011-05-26 22:03:08 | 000,139,620 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\Obraz.jpg [2011-05-26 22:03:08 | 000,139,620 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\jeden.dup [2011-05-26 22:03:01 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Obraz.xcf [2011-05-22 22:32:06 | 000,259,604 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb1.bin [2011-05-22 22:32:06 | 000,000,001 | ---- | M] () -- C:\WINDOWS\System32\nvdrssel.bin [2011-05-22 22:32:05 | 000,259,604 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb0.bin [2011-05-22 22:18:36 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2011-05-20 17:47:33 | 000,000,419 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Uruchom Wiedźmin 2.lnk [2011-05-18 18:24:24 | 000,503,070 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2011-05-18 18:24:24 | 000,443,724 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2011-05-18 18:24:24 | 000,090,292 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2011-05-18 18:24:24 | 000,071,982 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2011-05-18 15:10:37 | 034,370,230 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\clip0001.avi [2011-05-17 21:20:14 | 000,234,250 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\dvd.dvds [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-06-12 12:35:41 | 000,001,612 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\Samsung Kies.lnk [2011-06-11 23:05:27 | 004,059,184 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\Ggwru94iKkIx.128.mp3 [2011-06-11 14:14:57 | 000,061,340 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\witcher2 2011-06-11 14-12-44-90.JPG [2011-06-10 21:38:29 | 000,072,802 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\snapshot20110610213824.bmp.jpg [2011-06-10 19:35:11 | 001,146,442 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\bez tytułu.bmp [2011-06-10 17:22:55 | 000,000,488 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\Fraps.lnk [2011-06-10 17:22:23 | 003,484,677 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\FRAPS 2.9.5 FULL.exe [2011-06-10 16:06:32 | 000,001,787 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Profile Manager.lnk [2011-06-10 16:06:32 | 000,001,750 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Game Cam.lnk [2011-06-10 16:06:19 | 003,540,813 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\PanelTweaks-87-1-1.zip [2011-06-10 16:05:30 | 003,549,172 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\GameCam_v1.4.0.5_Registered.rar [2011-06-04 14:40:50 | 000,096,391 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\Obraz.png [2011-05-31 20:42:50 | 000,667,344 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\mp3gain-win-1_2_5.exe [2011-05-30 19:16:38 | 000,022,554 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\seminarium.pdf [2011-05-28 13:04:01 | 000,018,545 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\bez tytułu.JPG [2011-05-27 18:55:39 | 000,031,941 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\mk3-10355.wma [2011-05-27 18:55:37 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Użytkownik\mk3-10355.wma [2011-05-27 15:53:35 | 000,000,873 | ---- | C] () -- C:\Documents and Settings\Użytkownik\.recently-used.xbel [2011-05-26 23:09:51 | 000,000,796 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\GIMP 2.lnk [2011-05-26 22:13:14 | 000,139,620 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\jeden.dup [2011-05-26 22:03:04 | 000,139,620 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\Obraz.jpg [2011-05-26 22:03:01 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Obraz.xcf [2011-05-22 22:24:59 | 002,116,894 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin [2011-05-20 17:47:33 | 000,000,419 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Uruchom Wiedźmin 2.lnk [2011-05-18 15:10:07 | 034,370,230 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\clip0001.avi [2011-04-18 21:25:10 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll [2011-04-18 21:25:10 | 000,042,112 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys [2011-03-17 10:12:00 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\LocalService\Dane aplikacji\$_hpcst$.hpc [2011-03-17 00:12:47 | 000,594,376 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2011-02-03 16:41:14 | 001,970,176 | ---- | C] () -- C:\WINDOWS\System32\d3dx9.dll [2011-01-27 10:53:33 | 000,011,376 | ---- | C] () -- C:\WINDOWS\ATM.INI [2011-01-27 10:53:33 | 000,001,720 | ---- | C] () -- C:\WINDOWS\MGX.INI [2011-01-27 10:53:33 | 000,000,498 | ---- | C] () -- C:\WINDOWS\DS40.INI [2011-01-27 10:53:13 | 000,115,904 | ---- | C] () -- C:\WINDOWS\ATMCNTRL.EXE [2011-01-27 10:53:13 | 000,000,306 | ---- | C] () -- C:\WINDOWS\SMARTSEP.INI [2011-01-15 15:03:17 | 000,000,000 | ---- | C] () -- C:\WINDOWS\dvdsnapshot.dat [2011-01-04 17:10:56 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll [2011-01-04 17:10:56 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll [2011-01-04 17:10:56 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll [2011-01-04 17:10:56 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll [2011-01-04 16:10:58 | 000,030,568 | ---- | C] () -- C:\WINDOWS\MusiccityDownload.exe [2010-12-20 19:52:47 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll [2010-12-04 22:51:11 | 000,259,604 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin [2010-12-04 22:51:09 | 000,259,604 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin [2010-12-04 22:51:09 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin [2010-12-04 15:56:49 | 000,010,084 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvphy.bin [2010-11-20 14:01:51 | 000,000,006 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Dane aplikacji\start [2010-11-20 13:57:46 | 000,000,206 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Dane aplikacji\skvkfd.bat [2010-10-16 12:57:05 | 000,024,576 | ---- | C] () -- C:\WINDOWS\MadUnInst.exe [2010-10-10 19:13:19 | 000,000,069 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Dane aplikacji\joiner.ini [2010-09-13 17:29:08 | 000,281,504 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys [2010-09-13 17:29:08 | 000,025,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys [2010-06-16 19:08:43 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI [2010-06-15 14:06:52 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Dane aplikacji\$_hpcst$.hpc [2010-06-03 15:13:34 | 000,000,061 | ---- | C] () -- C:\WINDOWS\Emu48.ini [2010-05-30 13:56:41 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll [2010-05-01 23:29:17 | 000,000,085 | ---- | C] () -- C:\WINDOWS\QTW.INI [2010-04-15 23:08:34 | 000,344,329 | ---- | C] () -- C:\WINDOWS\CSUPP.EXE [2010-02-12 12:31:00 | 000,336,896 | ---- | C] () -- C:\WINDOWS\System32\ammppg.dll [2010-02-12 12:31:00 | 000,303,104 | ---- | C] () -- C:\WINDOWS\System32\qscl.dll [2010-02-12 12:31:00 | 000,233,472 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll [2010-02-12 12:31:00 | 000,212,992 | ---- | C] () -- C:\WINDOWS\System32\amrdec.dll [2010-02-12 12:31:00 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\qcpsdk.dll [2010-02-12 12:31:00 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\a1.dll [2010-01-31 00:03:20 | 000,000,753 | ---- | C] () -- C:\WINDOWS\Gfact.ini [2010-01-31 00:03:20 | 000,000,027 | ---- | C] () -- C:\WINDOWS\gdx.ini [2010-01-08 18:01:20 | 000,000,505 | ---- | C] () -- C:\WINDOWS\n02.ini [2010-01-06 20:40:14 | 000,000,071 | ---- | C] () -- C:\WINDOWS\DEMO.INI [2009-12-17 22:47:13 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2009-12-16 20:02:13 | 000,000,135 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2009-12-09 17:24:20 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2009-12-01 23:56:45 | 000,087,552 | ---- | C] () -- C:\WINDOWS\System32\cpwmon2k.dll [2009-11-29 18:33:11 | 000,002,498 | ---- | C] () -- C:\WINDOWS\kaillera.ini [2009-10-18 18:52:46 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009-10-17 17:02:22 | 000,000,251 | ---- | C] () -- C:\WINDOWS\PowerReg.dat [2009-10-16 21:55:44 | 000,003,528 | ---- | C] () -- C:\WINDOWS\System32\secushr.dat [2009-10-12 18:57:01 | 000,000,732 | ---- | C] () -- C:\WINDOWS\System32\secustat.dat [2009-10-12 18:55:57 | 000,000,025 | ---- | C] () -- C:\WINDOWS\libem.INI [2009-10-10 14:21:59 | 000,000,312 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\links.cfg [2009-10-08 15:38:32 | 005,640,880 | ---- | C] () -- C:\WINDOWS\System32\SpoonUninstall.exe [2009-10-03 15:14:15 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2009-10-03 15:14:14 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2009-10-03 15:14:14 | 002,041,363 | ---- | C] () -- C:\WINDOWS\System32\x264vfw.dll [2009-10-03 15:14:14 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-10-02 20:55:23 | 002,392,064 | ---- | C] () -- C:\WINDOWS\System32\videotrans.dll [2009-10-02 20:55:23 | 000,215,040 | ---- | C] () -- C:\WINDOWS\System32\videoformat.dll [2009-10-02 20:55:23 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\imgscaler.dll [2009-10-02 20:55:23 | 000,022,016 | ---- | C] () -- C:\WINDOWS\System32\img_utils.dll [2009-10-02 20:55:23 | 000,017,920 | ---- | C] () -- C:\WINDOWS\System32\videocore.dll [2009-10-02 20:55:22 | 000,128,512 | ---- | C] () -- C:\WINDOWS\System32\xvid.dll [2009-10-02 20:20:07 | 000,038,912 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-10-01 19:16:29 | 000,376,832 | ---- | C] () -- C:\WINDOWS\System32\AegisI5Installer.exe [2009-10-01 19:16:24 | 000,002,048 | ---- | C] () -- C:\WINDOWS\System32\rt73.bin [2009-09-28 17:10:02 | 000,086,528 | ---- | C] () -- C:\WINDOWS\bnetunin.exe [2009-09-28 11:55:52 | 000,000,452 | ---- | C] () -- C:\WINDOWS\Game.INI [2009-09-27 14:35:30 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2009-09-27 14:24:58 | 000,000,090 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2009-09-27 14:11:28 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2009-09-27 14:08:54 | 000,138,056 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2009-09-27 12:21:49 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2009-09-27 12:18:18 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2009-06-07 16:24:04 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-06-07 16:16:12 | 000,217,088 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2008-04-15 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2008-04-15 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2008-04-15 14:00:00 | 000,503,070 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2008-04-15 14:00:00 | 000,443,724 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2008-04-15 14:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2008-04-15 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2008-04-15 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2008-04-15 14:00:00 | 000,090,292 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2008-04-15 14:00:00 | 000,071,982 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2008-04-15 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2008-04-15 14:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2008-04-15 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2008-04-15 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2008-04-15 14:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2008-04-15 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin [2008-04-15 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [2007-03-12 13:01:30 | 000,217,088 | ---- | C] () -- C:\WINDOWS\NVGfxOgl.dll [2003-04-08 11:40:22 | 000,005,679 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI [1999-09-28 16:58:21 | 000,005,647 | ---- | C] () -- C:\WINDOWS\System32\HDK3CRYP.DLL [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:05EE1EEF @Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:C8B8CEBD < End of report >

DDS:

Kod: Zaznacz wszystko: DDS (Ver_2011-06-12.02) - NTFSx86 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23 Run by Użytkownik at 17:55:38 on 2011-06-16 Microsoft Windows XP Professional 5.1.2600.3.1250.48.1045.18.3583.2531 [GMT 2:00] . AV: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF} . ============== Running Processes =============== . C:\PROGRA~1\AVG\AVG10\avgchsvx.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe svchost.exe C:\Program Files\AVG\AVG10\avgwdsvc.exe C:\WINDOWS\system32\FsUsbExService.Exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\svchost.exe -k imgsvc C:\Program Files\AVG\AVG10\avgnsx.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\AVG\AVG10\avgtray.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\Program Files\Gadu-Gadu 10\gg.exe C:\Program Files\Samsung\Kies\KiesTrayAgent.exe C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\System32\svchost.exe -k HTTPFilter C:\WINDOWS\system32\WISPTIS.EXE C:\Program Files\Common Files\Java\Java Update\jucheck.exe C:\PROGRA~1\AVG\AVG10\avgrsx.exe C:\Program Files\AVG\AVG10\avgcsrvx.exe C:\Program Files\AVG\AVG10\avgsrmax.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Adobe\Photoshop CS\Photoshop.exe C:\WINDOWS\system32\mspaint.exe C:\WINDOWS\system32\mspaint.exe C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://google.pl/ uSearch Page = uSearch Bar = mSearchAssistant = BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: FGCatchUrl: {2f364306-aa45-47b5-9f9d-39a8b94e7ef7} - c:\program files\flashget\jccatch.dll BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg10\avgssie.dll BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll BHO: FlashGet GetFlash Class: {f156768e-81ef-470c-9057-481ba8380dba} - c:\program files\flashget\getflash.dll BHO: SMTTB2009 Class: {fcbccb87-9224-4b8d-b117-f56d924beb18} - c:\program files\hypercam toolbar\tbcore3.dll TB: HyperCam Toolbar: {338b4dfe-2e2c-4338-9e41-e176d497299e} - c:\program files\hypercam toolbar\tbcore3.dll uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [NVIDIA nTune] "c:\program files\nvidia corporation\ntune\nTuneCmd.exe" clear uRun: [H/PC Connection Agent] "c:\program files\microsoft activesync\wcescomm.exe" uRun: [Gadu-Gadu 10] "c:\program files\gadu-gadu 10\gg.exe" uRun: [KiesHelper] c:\program files\samsung\kies\KiesHelper.exe /s uRun: [KiesTrayAgent] c:\program files\samsung\kies\KiesTrayAgent.exe mRun: [RTHDCPL] RTHDCPL.EXE mRun: [AVG_TRAY] c:\program files\avg\avg10\avgtray.exe mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mRun: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [nwiz] c:\program files\nvidia corporation\nview\nwiz.exe /installquiet dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE IE: &Download All with FlashGet - c:\program files\flashget\jc_all.htm IE: &Download with FlashGet - c:\program files\flashget\jc_link.htm IE: Download by FlashGet3 - c:\documents and settings\użytkownik\dane aplikacji\flashgetbho\GetUrl.htm IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\micros~4\INetRepl.dll IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\micros~4\INetRepl.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL DPF: {31435657-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab TCP: DhcpNameServer = 194.204.152.34 194.204.159.1 TCP: Interfaces\{3338D050-0E9E-42B7-9924-B1519034210D} : DhcpNameServer = 194.204.152.34 194.204.159.1 Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg10\avgpp.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll . ================= FIREFOX =================== . FF - ProfilePath - c:\documents and settings\użytkownik\dane aplikacji\mozilla\firefox\profiles\v9964hli.default\ FF - prefs.js: browser.startup.homepage - hxxp://google.pl/ FF - component: c:\program files\avg\avg10\firefox\components\avgssff.dll FF - plugin: c:\documents and settings\all users\dane aplikacji\gadu-gadu 10\_userdata\npgg.4.dll FF - plugin: c:\documents and settings\uĺľytkownik\dane aplikacji\mozilla\firefox\profiles\v9964hli.default\extensions\firefox-plugin@camspace.com\plugins\npffax.dll FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll FF - plugin: c:\program files\nos\bin\np_gp.dll FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\java\jre6\lib\deploy\jqs\ff FF - Ext: AVG Safe Search: {3f963a5b-e555-4543-90e2-c3908898db71} - c:\program files\avg\avg10\Firefox FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b} FF - Ext: 1-Click YouTube Video Downloader: YoutubeDownloader@PeterOlayev.com - %profile%\extensions\YoutubeDownloader@PeterOlayev.com FF - Ext: CamSpace plugin for Firefox: firefox-plugin@camspace.com - %profile%\extensions\firefox-plugin@camspace.com FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} . ============= SERVICES / DRIVERS =============== . R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [2010-9-13 22992] R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2010-9-7 32592] R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2010-9-7 248656] R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2010-9-7 34896] R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2010-11-9 297168] R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg10\identity protection\agent\bin\AVGIDSAgent.exe [2011-4-18 7398752] R2 avgwd;AVG WatchDog;c:\program files\avg\avg10\avgwdsvc.exe [2011-2-8 269520] R2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2011-4-18 222568] R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\nvidia corporation\nvidia updatus\daemonu.exe [2011-5-22 2218600] R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [2010-8-19 134480] R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [2010-8-19 24144] R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [2010-8-19 27216] R3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [2011-4-18 42112] R3 GRemoteBus;GRemote virtual joystick Bus Enumerator;c:\windows\system32\drivers\GRemoteBus.sys [2009-8-5 23368] R3 GRemoteJoy;GRemote virtual joystick Device Driver;c:\windows\system32\drivers\GRemoteJoy.sys [2009-8-5 39112] S3 AmdTools;AMD Special Tools Driver;c:\windows\system32\drivers\amdtools.sys --> c:\windows\system32\drivers\AmdTools.sys [?] S3 ASPI;Advanced SCSI Programming Interface Driver;c:\windows\system32\drivers\ASPI32.SYS [2010-1-16 16512] S3 CamSpaceBus;CamSpace Virtual Joystick Bus device driver;c:\windows\system32\drivers\CamSpaceBus.sys [2008-8-24 14848] S3 CamSpaceJoy;CamSpace Virtual Joystick device driver;c:\windows\system32\drivers\CamSpaceJoy.sys [2008-8-24 30464] S3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [2011-4-18 18120] S3 PPJoyBus;Parallel Port Joystick Bus device driver;c:\windows\system32\drivers\PPJoyBus.sys [2004-1-23 13952] S3 PPortJoystick;Parallel Port Joystick device driver;c:\windows\system32\drivers\PPortJoy.sys [2004-1-23 28800] S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [2011-4-18 121192] S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [2011-4-18 12776] S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [2011-4-18 136680] . =============== Created Last 30 ================ . 2011-06-10 15:22:54 -------- d-----w- C:\Fraps 2011-06-10 14:06:30 -------- d-----w- c:\program files\Game Cam v1.4.0.5 2011-06-10 13:15:35 -------- d-----w- c:\documents and settings\użytkownik\ustawienia lokalne\dane aplikacji\gctmp 2011-06-10 13:15:34 -------- d-----w- c:\documents and settings\użytkownik\ustawienia lokalne\dane aplikacji\Xenocode 2011-06-10 12:57:12 309616 ----a-w- c:\windows\system32\wmv8dmod.dll 2011-06-10 12:57:12 241664 ----a-w- c:\windows\system32\mp4sds32.ax 2011-06-10 12:57:11 420240 ----a-w- c:\windows\system32\mpg4c32.dll 2011-06-10 12:56:50 77824 ----a-w- c:\program files\common files\installshield\engine\6\intel 32\ctor.dll 2011-06-10 12:56:50 212992 ----a-w- c:\program files\common files\installshield\engine\6\intel 32\ILog.dll 2011-06-10 12:38:00 -------- d-----w- c:\program files\HyperCam Toolbar 2011-05-26 21:10:42 -------- d-----w- c:\documents and settings\użytkownik\.thumbnails 2011-05-26 21:09:58 -------- d-----w- c:\documents and settings\użytkownik\.gimp-2.6 2011-05-26 21:09:35 -------- d-----w- c:\program files\GIMP-2.0 2011-05-22 20:24:59 944232 ----a-w- c:\windows\system32\nvdispco3220140.dll 2011-05-22 20:24:59 855656 ----a-w- c:\windows\system32\nvgenco322060.dll 2011-05-22 20:24:59 2116894 ----a-w- c:\windows\system32\nvdata.bin 2011-05-22 20:02:37 -------- d-----w- c:\windows\system32\wbem\repository\FS 2011-05-22 20:02:37 -------- d-----w- c:\windows\system32\wbem\Repository 2011-05-22 19:27:45 -------- d-----w- c:\windows\LastGood(2) 2011-05-21 14:44:28 -------- d-----w- c:\documents and settings\użytkownik\dane aplikacji\DisneyInteractiveStudios 2011-05-20 15:51:06 -------- d-----w- c:\documents and settings\użytkownik\ustawienia lokalne\dane aplikacji\The Witcher 2 2011-05-18 12:27:16 -------- d-----w- c:\program files\DAEMON Tools Lite . ==================== Find3M ==================== . 2011-05-22 20:32:06 259604 ----a-w- c:\windows\system32\nvdrsdb1.bin 2011-05-22 20:32:06 1 ----a-w- c:\windows\system32\nvdrssel.bin 2011-05-22 20:32:05 259604 ----a-w- c:\windows\system32\nvdrsdb0.bin 2011-05-11 21:47:36 65536 ----a-w- c:\windows\system32\frapsvid.dll 2011-04-17 11:59:40 443448 ----a-w- c:\windows\system32\drivers\sptd.sys 2011-04-14 19:28:42 134480 ----a-w- c:\windows\system32\drivers\AVGIDSDriver.sys 2011-04-08 05:14:00 61440 ----a-w- c:\windows\system32\OpenCL.dll 2011-04-08 05:14:00 5210112 ----a-w- c:\windows\system32\nvcuda.dll 2011-04-08 05:14:00 4111232 ----a-w- c:\windows\system32\nv4_disp.dll 2011-04-08 05:14:00 2770536 ----a-w- c:\windows\system32\nvcuvid.dll 2011-04-08 05:14:00 2074216 ----a-w- c:\windows\system32\nvcuvenc.dll 2011-04-08 05:14:00 2027008 ----a-w- c:\windows\system32\nvapi.dll 2011-04-08 05:14:00 14856192 ----a-w- c:\windows\system32\nvoglnt.dll 2011-04-08 05:14:00 13000704 ----a-w- c:\windows\system32\nvcompiler.dll 2011-04-08 05:14:00 12501600 ----a-w- c:\windows\system32\drivers\nv4_mini.sys 2011-04-04 22:59:56 297168 ----a-w- c:\windows\system32\drivers\avgtdix.sys 2011-03-28 14:49:25 0 ----a-w- c:\documents and settings\użytkownik\TK3Ocpka.dll 2006-05-03 10:06:54 163328 --sha-r- c:\windows\system32\flvDX.dll 2007-02-21 11:47:16 31232 --sha-r- c:\windows\system32\msfDX.dll 2008-03-16 13:30:52 216064 --sha-r- c:\windows\system32\nbDX.dll . ============= FINISH: 17:55:56,35 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-06-12.02) . Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 2009-09-27 12:21:46 System Uptime: 2011-06-16 15:28:37 (2 hours ago) . Motherboard: Gigabyte Technology Co., Ltd. | | M61PME-S2 Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 5600+ | Socket M2 | 2812/200mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 98 GiB total, 4,481 GiB free. D: is CDROM () E: is FIXED (NTFS) - 98 GiB total, 77,882 GiB free. F: is FIXED (NTFS) - 103 GiB total, 12,765 GiB free. H: is CDROM () . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP207: 2011-03-17 23:19:27 - Software Distribution Service 3.0 RP208: 2011-03-18 10:25:11 - Software Distribution Service 3.0 RP209: 2011-03-18 14:54:37 - Software Distribution Service 3.0 RP210: 2011-03-18 21:10:56 - Software Distribution Service 3.0 RP211: 2011-03-19 23:15:19 - Software Distribution Service 3.0 RP212: 2011-03-20 16:12:39 - Installed Age of Empires RP213: 2011-03-20 16:14:51 - Installed Age of Empires Video RP214: 2011-03-20 16:15:41 - Installed Age of Empires Scenarios RP215: 2011-03-20 16:16:08 - Installed Age of Empires Scenarios RP216: 2011-03-20 16:16:34 - Installed Age of Empires Campaigns RP217: 2011-03-20 18:14:01 - Software Distribution Service 3.0 RP218: 2011-03-20 22:15:36 - Software Distribution Service 3.0 RP219: 2011-03-21 20:29:31 - Software Distribution Service 3.0 RP220: 2011-03-22 18:54:26 - Usunięte Samsung Kies RP221: 2011-03-23 11:14:56 - Software Distribution Service 3.0 RP222: 2011-03-23 21:03:37 - Software Distribution Service 3.0 RP223: 2011-03-24 23:22:00 - Software Distribution Service 3.0 RP224: 2011-03-25 23:32:49 - Software Distribution Service 3.0 RP225: 2011-03-26 12:18:14 - Usunięte Gothic III RP226: 2011-03-26 13:17:11 - Software Distribution Service 3.0 RP227: 2011-03-27 11:54:39 - Software Distribution Service 3.0 RP228: 2011-03-27 21:41:38 - Software Distribution Service 3.0 RP229: 2011-03-29 21:03:55 - Software Distribution Service 3.0 RP230: 2011-03-29 23:35:32 - Software Distribution Service 3.0 RP231: 2011-03-30 21:48:09 - Removed Age of Empires Scenarios RP232: 2011-03-30 21:48:24 - Removed Age of Empires Video RP233: 2011-03-30 21:48:35 - Removed Age of Empires Campaigns RP234: 2011-03-30 21:48:46 - Removed Age of Empires RP235: 2011-03-31 10:22:52 - Software Distribution Service 3.0 RP236: 2011-04-01 15:12:55 - Software Distribution Service 3.0 RP237: 2011-04-01 18:42:22 - Installed ISO Recorder RP238: 2011-04-01 22:54:24 - Software Distribution Service 3.0 RP239: 2011-04-03 11:11:42 - Software Distribution Service 3.0 RP240: 2011-04-03 18:32:15 - Software Distribution Service 3.0 RP241: 2011-04-04 13:58:55 - Software Distribution Service 3.0 RP242: 2011-04-04 23:14:11 - Software Distribution Service 3.0 RP243: 2011-04-05 23:01:30 - Software Distribution Service 3.0 RP244: 2011-04-06 19:29:44 - Software Distribution Service 3.0 RP245: 2011-04-06 19:29:56 - Zainstalowano Windows Media Player KB952069. RP246: 2011-04-08 18:56:34 - Software Distribution Service 3.0 RP247: 2011-04-10 11:32:52 - Software Distribution Service 3.0 RP248: 2011-04-10 12:21:53 - Instalacja niepodpisanego sterownika RP249: 2011-04-13 14:15:25 - Punkt kontrolny systemu RP250: 2011-04-15 15:15:32 - Punkt kontrolny systemu RP251: 2011-04-15 19:22:51 - Software Distribution Service 3.0 RP252: 2011-04-17 13:59:40 - SPTD setup V1.78 RP253: 2011-04-18 21:24:12 - Zainstalowane Samsung Kies RP254: 2011-04-20 16:11:19 - Punkt kontrolny systemu RP255: 2011-04-21 18:58:20 - Software Distribution Service 3.0 RP256: 2011-04-23 18:03:46 - Punkt kontrolny systemu RP257: 2011-04-25 13:00:37 - Punkt kontrolny systemu RP258: 2011-04-27 17:46:49 - Software Distribution Service 3.0 RP259: 2011-05-02 16:59:24 - Punkt kontrolny systemu RP260: 2011-05-04 16:18:05 - Punkt kontrolny systemu RP261: 2011-05-06 16:31:11 - Punkt kontrolny systemu RP262: 2011-05-06 18:35:59 - Zainstalowano AVG 2011 RP263: 2011-05-06 18:37:31 - Usunięto AVG 2011 RP264: 2011-05-07 15:55:52 - Installed Company of Heroes Single Player Demo. RP265: 2011-05-09 00:12:17 - Software Distribution Service 3.0 RP266: 2011-05-10 00:28:20 - Punkt kontrolny systemu RP267: 2011-05-11 19:07:55 - Software Distribution Service 3.0 RP268: 2011-05-17 17:57:04 - Punkt kontrolny systemu RP269: 2011-05-19 10:12:31 - Punkt kontrolny systemu RP270: 2011-05-20 17:28:44 - Removed Company of Heroes Single Player Demo. RP271: 2011-05-20 17:29:07 - Zainstalowane Wiedźmin 2 RP272: 2011-05-21 16:40:46 - Zainstalowano: LEGO® Piraci z Karaibów Gra wideo DEMO RP273: 2011-05-22 12:42:00 - Aktualizuj do niepodpisanego sterownika RP274: 2011-05-22 20:46:01 - Aktualizuj do niepodpisanego sterownika RP275: 2011-05-22 21:28:10 - Aktualizuj do niepodpisanego sterownika RP276: 2011-05-22 21:59:38 - Operacja przywracania RP277: 2011-05-22 22:11:09 - Usunięto: LEGO® Piraci z Karaibów Gra wideo DEMO RP278: 2011-05-25 19:53:32 - Punkt kontrolny systemu RP279: 2011-05-27 19:54:51 - Punkt kontrolny systemu RP280: 2011-06-01 19:10:45 - Zainstalowany program DirectX RP281: 2011-06-03 18:09:43 - Punkt kontrolny systemu RP282: 2011-06-05 13:49:21 - Punkt kontrolny systemu RP283: 2011-06-06 16:35:15 - Punkt kontrolny systemu RP284: 2011-06-10 16:06:26 - Installed Game Cam (Registered) v1.4.0.5 RP285: 2011-06-10 21:44:55 - Software Distribution Service 3.0 RP286: 2011-06-12 12:22:17 - Punkt kontrolny systemu RP287: 2011-06-15 18:16:36 - Punkt kontrolny systemu . ==== Installed Programs ====================== . Adobe Flash Player 10 Plugin Adobe Photoshop CS Aktualizacja dla systemu Windows XP (KB2141007) Aktualizacja dla systemu Windows XP (KB2345886) Aktualizacja dla systemu Windows XP (KB2467659) Aktualizacja dla systemu Windows XP (KB971029) Aktualizacja zabezpieczeń dla programu Windows Media Player (KB2378111) Aktualizacja zabezpieczeń dla programu Windows Media Player (KB975558) Aktualizacja zabezpieczeń dla programu Windows Media Player (KB978695) Aktualizacja zabezpieczeń dla programu Windows Media Player (KB979402) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2183461) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2360131) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2416400) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2482017) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2497640) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB2510531) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB981332) Aktualizacja zabezpieczeń dla systemu Windows Internet Explorer 8 (KB982381) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2079403) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2115168) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2121546) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2160329) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2229593) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2259922) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2279986) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2286198) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2296011) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2296199) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2347290) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2360937) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2387149) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2393802) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2412687) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2419632) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2423089) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2436673) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2440591) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2443105) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2476687) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2478960) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2478971) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2479628) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2479943) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2481109) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2483185) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2485376) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2485663) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2503658) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2506212) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2506223) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2507618) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2508272) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2508429) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2509553) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2511455) Aktualizacja zabezpieczeń dla systemu Windows XP (KB2524375) Aktualizacja zabezpieczeń dla systemu Windows XP (KB975562) Aktualizacja zabezpieczeń dla systemu Windows XP (KB977816) Aktualizacja zabezpieczeń dla systemu Windows XP (KB978338) Aktualizacja zabezpieczeń dla systemu Windows XP (KB978542) Aktualizacja zabezpieczeń dla systemu Windows XP (KB978601) Aktualizacja zabezpieczeń dla systemu Windows XP (KB979309) Aktualizacja zabezpieczeń dla systemu Windows XP (KB979482) Aktualizacja zabezpieczeń dla systemu Windows XP (KB979559) Aktualizacja zabezpieczeń dla systemu Windows XP (KB979683) Aktualizacja zabezpieczeń dla systemu Windows XP (KB979687) Aktualizacja zabezpieczeń dla systemu Windows XP (KB980195) Aktualizacja zabezpieczeń dla systemu Windows XP (KB980218) Aktualizacja zabezpieczeń dla systemu Windows XP (KB980232) Aktualizacja zabezpieczeń dla systemu Windows XP (KB980436) Aktualizacja zabezpieczeń dla systemu Windows XP (KB981322) Aktualizacja zabezpieczeń dla systemu Windows XP (KB981852) Aktualizacja zabezpieczeń dla systemu Windows XP (KB981957) Aktualizacja zabezpieczeń dla systemu Windows XP (KB981997) Aktualizacja zabezpieczeń dla systemu Windows XP (KB982132) Aktualizacja zabezpieczeń dla systemu Windows XP (KB982214) Aktualizacja zabezpieczeń dla systemu Windows XP (KB982665) Aktualizacja zabezpieczeń dla systemu Windows XP (KB982802) Aktualizacje NVIDIA 1.1.34 AVG 2011 AVI Joiner version 1.22 AVI ReComp 1.5.1 AviSynth 2.5 Cheat Engine 5.5 DAEMON Tools Lite Die by the Sword DVDStyler v1.8.3 FinePrint Fraps (remove only) Free Video Joiner 1.1 Gadu-Gadu 10 Game Cam (Registered) v1.4.0.5 GIMP 2.6.11 Gothic 3 - Quest Pack 4 PL GRemoteServer Pro(remove only) HijackThis 2.0.2 Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows XP (KB976002-v5) HyperCam Toolbar ipla 2.2.1 Java Auto Updater Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Security Update (KB2416447) Microsoft .NET Framework 1.1 Security Update (KB979906) Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - PLK Microsoft .NET Framework 2.0 Service Pack 2 Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - PLK Microsoft .NET Framework 3.0 Service Pack 2 Microsoft .NET Framework 3.5 Language Pack - plk Microsoft .NET Framework 3.5 SP1 Microsoft ActiveSync Microsoft Office Professional Edition 2003 Microsoft Silverlight Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2005 Redistributable - KB2467175 Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 Mozilla Firefox (3.5.19) Multimedia Fusion 2 NAVIGON Fresh 3.2.0 NVIDIA Drivers NVIDIA Install Application NVIDIA nView 135.70 NVIDIA nView Desktop Manager NVIDIA Oprogramowanie systemu PhysX 9.10.0514 NVIDIA PhysX NVIDIA Sterownik graficzny 270.61 NVIDIA Update Components Pakiet językowy programu Microsoft .NET Framework 3.5 — PLK Pakiet zgodności dla systemu Office 2007 Panel sterowania NVIDIA 270.61 PCSX2 - Playstation 2 Emulator PL-2303 USB-to-Serial Poprawka dla systemu Windows XP (KB2158563) Poprawka dla systemu Windows XP (KB2443685) Poprawka dla systemu Windows XP (KB981793) Samsung Kies SAMSUNG USB Driver for Mobile Phones Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) Snagit 10 Steam TK3Online v1 with ePSXe 1.5.2 Tom Clancy's Splinter Cell: Pandora Tomorrow Total Video Converter 3.10 v2011.build.45 Wiedźmin 2 Windows Media Format 11 runtime WinRAR archiver XML Paper Specification Shared Components Language Pack 1.0 Xvid 1.2.2 YouTube Downloader 2.7.2 . ==== End Of File ===========================

Hijack:

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 17:59:08, on 2011-06-16 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\PROGRA~1\AVG\AVG10\avgchsvx.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\AVG\AVG10\avgwdsvc.exe C:\WINDOWS\system32\FsUsbExService.Exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\AVG\AVG10\avgnsx.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\AVG\AVG10\avgtray.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\Program Files\Gadu-Gadu 10\gg.exe C:\Program Files\Samsung\Kies\KiesTrayAgent.exe C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\WISPTIS.EXE C:\Program Files\Common Files\Java\Java Update\jucheck.exe C:\PROGRA~1\AVG\AVG10\avgrsx.exe C:\Program Files\AVG\AVG10\avgcsrvx.exe C:\Program Files\AVG\AVG10\avgsrmax.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Adobe\Photoshop CS\Photoshop.exe C:\WINDOWS\system32\mspaint.exe C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe C:\WINDOWS\system32\msiexec.exe C:\Program Files\Trend Micro\HijackThis\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/ R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\HyperCam Toolbar\tbcore3.dll O3 - Toolbar: HyperCam Toolbar - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\HyperCam Toolbar\tbcore3.dll O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKCU\..\Run: [Gadu-Gadu 10] "C:\Program Files\Gadu-Gadu 10\gg.exe" O4 - HKCU\..\Run: [KiesHelper] C:\Program Files\Samsung\Kies\KiesHelper.exe /s O4 - HKCU\..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-21-1482476501-682003330-1676017868-1006\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'UpdatusUser') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: Download by FlashGet3 - C:\Documents and Settings\Użytkownik\Dane aplikacji\FlashGetBHO\GetUrl.htm O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll O9 - Extra 'Tools' menuitem: Utwórz Ulubione dla urządzenia przenośnego... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll O22 - SharedTaskScheduler: Moduł wstępnego ładowania interfejsu Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Demon buforu kategorii składników - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgwdsvc.exe O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- End of file - 6536 bytes

**Posty:** 18165 · przez **wojtas** 16 Cze 2011, 19:37

Brak loga z Gmera pamiętaj o emulacji, brak też drugiego loga z OTL , do poprawy w następnym poście:

odinstaluj HyperCam Toolbar

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
O20 - HKCU Winlogon: Shell - (c:\documents and settings\użytkownik\dane aplikacji\hotfix.exe) - File not found
[2010-11-20 14:01:51 | 000,000,006 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Dane aplikacji\start
[2010-11-20 13:57:46 | 000,000,206 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Dane aplikacji\skvkfd.bat

:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Shell"="explorer.exe"

:Commands
[emptytemp]
[emptyflash]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

* zrób pełny skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie ) , pokaż raport działania, nowe logi z OTL i Gmer

**Posty:** 448 · przez **kamiledi15** 17 Cze 2011, 20:04

OTL

Kod: Zaznacz wszystko: All processes killed ========== OTL ========== Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell not found. C:\Documents and Settings\Użytkownik\Dane aplikacji\start moved successfully. C:\Documents and Settings\Użytkownik\Dane aplikacji\skvkfd.bat moved successfully. ========== REGISTRY ========== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\"Shell"|"explorer.exe" /E : value set successfully! ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 0 bytes ->Flash cache emptied: 0 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: LocalService ->Temp folder emptied: 66016 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: UpdatusUser ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: UĹĽytkownik User: Użytkownik ->Temp folder emptied: 592208328 bytes ->Temporary Internet Files folder emptied: 155999925 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 50175306 bytes ->Flash cache emptied: 39244 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 2570563 bytes RecycleBin emptied: 1884010391 bytes Total Files Cleaned = 2 561,00 mb [EMPTYFLASH] User: Administrator ->Flash cache emptied: 0 bytes User: All Users User: Default User User: LocalService User: NetworkService User: UpdatusUser User: UĹĽytkownik User: Użytkownik ->Flash cache emptied: 0 bytes Total Flash Files Cleaned = 0,00 mb OTL by OldTimer - Version 3.2.24.0 log created on 06172011_144411 Files\Folders moved on Reboot... C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Temp\WCESLog.log moved successfully. Registry entries deleted on Reboot...

Kod: Zaznacz wszystko: OTL logfile created on: 2011-06-17 17:00:18 - Run 4 OTL by OldTimer - Version 3.2.24.0 Folder = C:\Documents and Settings\Użytkownik\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,50 Gb Total Physical Memory | 2,40 Gb Available Physical Memory | 68,47% Memory free 7,34 Gb Paging File | 6,45 Gb Available in Paging File | 87,87% Paging File free Paging file location(s): [Binary data over 100 bytes] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 97,65 Gb Total Space | 4,78 Gb Free Space | 4,89% Space Free | Partition Type: NTFS Drive E: | 97,65 Gb Total Space | 77,88 Gb Free Space | 79,75% Space Free | Partition Type: NTFS Drive F: | 102,77 Gb Total Space | 13,27 Gb Free Space | 12,91% Space Free | Partition Type: NTFS Computer Name: W-4E1E25B952BE4 | User Name: Użytkownik | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-06-16 17:29:24 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Użytkownik\Pulpit\OTL.exe PRC - [2011-05-11 18:41:10 | 003,373,968 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe PRC - [2011-04-29 23:36:58 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2011-04-18 17:40:08 | 002,334,560 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgtray.exe PRC - [2011-04-18 17:39:42 | 007,398,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe PRC - [2011-04-14 05:36:42 | 001,080,672 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgnsx.exe PRC - [2011-04-08 07:14:00 | 002,218,600 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe PRC - [2011-03-28 03:00:52 | 000,351,072 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgcsrvx.exe PRC - [2011-03-16 16:05:14 | 000,656,736 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgchsvx.exe PRC - [2011-02-10 07:55:18 | 001,148,256 | ---- | M] () -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe PRC - [2011-02-08 05:33:42 | 000,269,520 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgwdsvc.exe PRC - [2011-02-08 05:33:20 | 000,658,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgrsx.exe PRC - [2011-01-05 22:23:48 | 000,222,568 | ---- | M] (Teruten) -- C:\WINDOWS\system32\FsUsbExService.Exe PRC - [2010-12-16 07:19:28 | 012,984,928 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe PRC - [2010-05-14 12:44:46 | 000,501,480 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe PRC - [2010-04-13 20:01:58 | 000,094,024 | ---- | M] (TechSmith Corporation) -- C:\Program Files\TechSmith\Snagit 10\TscHelp.exe PRC - [2010-04-13 20:01:56 | 000,079,688 | ---- | M] (TechSmith Corporation) -- C:\Program Files\TechSmith\Snagit 10\SnagPriv.exe PRC - [2010-04-13 20:01:52 | 007,384,904 | ---- | M] (TechSmith Corporation) -- C:\Program Files\TechSmith\Snagit 10\SnagitEditor.exe PRC - [2010-04-13 20:01:52 | 007,046,984 | ---- | M] (TechSmith Corporation) -- C:\Program Files\TechSmith\Snagit 10\Snagit32.exe PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2006-05-24 13:48:10 | 000,767,488 | ---- | M] (Virtuall Technology Systems) -- C:\MKP\Data\Info\Fighter Factory\ff32.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-06-16 17:29:24 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Użytkownik\Pulpit\OTL.exe MOD - [2010-08-23 18:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- -- (HidServ) SRV - [2011-04-18 17:39:42 | 007,398,752 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent) SRV - [2011-04-08 07:14:00 | 002,218,600 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2011-02-08 05:33:42 | 000,269,520 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\avgwdsvc.exe -- (avgwd) SRV - [2011-01-05 22:23:48 | 000,222,568 | ---- | M] (Teruten) [Auto | Running] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService) SRV - [2007-09-04 20:25:44 | 000,131,072 | ---- | M] (NVIDIA) [Disabled | Stopped] -- C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe -- (nTuneService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-05-29 09:11:30 | 000,039,984 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy) DRV - [2011-04-14 21:28:42 | 000,134,480 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver) DRV - [2011-04-05 00:59:56 | 000,297,168 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (Avgtdix) DRV - [2011-03-16 16:03:20 | 000,032,592 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\avgrkx86.sys -- (Avgrkx86) DRV - [2011-03-01 14:25:18 | 000,034,896 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (Avgmfx86) DRV - [2011-02-22 08:13:02 | 000,022,992 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys -- (AVGIDSEH) DRV - [2011-02-10 07:53:54 | 000,027,216 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSShim.sys -- (AVGIDSShim) DRV - [2011-02-10 07:53:52 | 000,024,144 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter) DRV - [2011-01-07 06:41:46 | 000,248,656 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (Avgldx86) DRV - [2011-01-05 22:23:40 | 000,042,112 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk) DRV - [2011-01-04 16:10:54 | 000,018,120 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\dgderdrv.sys -- (dgderdrv) DRV - [2011-01-03 10:38:36 | 000,136,680 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdm.sys -- (ssadmdm) DRV - [2011-01-03 10:38:36 | 000,121,192 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM) DRV - [2011-01-03 10:38:36 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter) DRV - [2010-12-21 07:55:02 | 000,132,424 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdm.sys -- (sscdmdm) DRV - [2010-12-21 07:55:02 | 000,104,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM) DRV - [2010-12-21 07:55:02 | 000,014,920 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdfl.sys -- (sscdmdfl) DRV - [2010-09-13 17:29:08 | 000,281,504 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt) DRV - [2010-09-13 17:29:08 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt) DRV - [2010-04-08 20:30:10 | 000,168,040 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvgts.sys -- (nvgts) DRV - [2010-03-04 12:02:10 | 000,013,824 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus) DRV - [2010-03-04 12:02:08 | 000,070,912 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD) DRV - [2010-02-03 16:56:56 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2009-11-19 14:33:20 | 000,051,200 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ser2pl.sys -- (Ser2pl) DRV - [2009-08-05 21:37:04 | 000,039,112 | ---- | M] (GBM Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\GRemoteJoy.sys -- (GRemoteJoy) DRV - [2009-08-05 21:37:04 | 000,023,368 | ---- | M] (GBM Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\GRemoteBus.sys -- (GRemoteBus) DRV - [2008-12-11 11:24:20 | 004,959,232 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2008-08-24 13:55:50 | 000,030,464 | ---- | M] (CamTrax Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CamSpaceJoy.sys -- (CamSpaceJoy) DRV - [2008-08-24 13:55:48 | 000,014,848 | ---- | M] (CamTrax Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CamSpaceBus.sys -- (CamSpaceBus) DRV - [2008-01-15 21:50:50 | 000,459,520 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rt73.sys -- (RT73) DRV - [2007-09-04 20:26:32 | 000,029,696 | ---- | M] (NVidia Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\nvoclock.sys -- (NVR0Dev) DRV - [2007-06-29 14:47:34 | 000,034,304 | ---- | M] (AMD, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AmdLLD.sys -- (AmdLLD) DRV - [2006-07-01 23:32:26 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8) DRV - [2004-10-24 08:11:00 | 000,028,800 | ---- | M] (Deon van der Westhuysen) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PPortJoy.sys -- (PPortJoystick) DRV - [2004-10-24 08:11:00 | 000,013,952 | ---- | M] (Deon van der Westhuysen) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PPJoyBus.sys -- (PPJoyBus) DRV - [2002-07-17 10:05:10 | 000,016,512 | ---- | M] (Adaptec) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ASPI32.SYS -- (ASPI) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/ IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://google.pl/" FF - prefs.js..extensions.enabledItems: YoutubeDownloader@PeterOlayev.com:1.5 FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:10.0.0.1374 FF - prefs.js..extensions.enabledItems: firefox-plugin@camspace.com:1.0.1.35 FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG10\Firefox\ [2011-05-11 11:04:26 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG10\Firefox4\ [2011-06-03 14:08:10 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.19\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-05-07 14:42:43 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.19\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-04-29 23:36:59 | 000,000,000 | ---D | M] [2009-12-15 17:49:56 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Extensions [2011-06-16 17:04:41 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\v9964hli.default\extensions [2011-06-14 15:27:46 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\v9964hli.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011-06-14 15:27:44 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\v9964hli.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2010-09-23 11:55:28 | 000,000,000 | ---D | M] (CamSpace plugin for Firefox) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\v9964hli.default\extensions\firefox-plugin@camspace.com [2011-06-14 15:27:45 | 000,000,000 | ---D | M] (1-Click YouTube Video Downloader) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\v9964hli.default\extensions\YoutubeDownloader@PeterOlayev.com [2011-06-16 17:04:41 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-01-29 15:18:28 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽYTKOWNIK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\V9964HLI.DEFAULT\EXTENSIONS\{20A82645-C095-46ED-80E3-08825760534B} File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽYTKOWNIK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\V9964HLI.DEFAULT\EXTENSIONS\{B9DB16A4-6EDC-47EC-A1F4-B86292ED211D} File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽYTKOWNIK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\V9964HLI.DEFAULT\EXTENSIONS\FIREFOX-PLUGIN@CAMSPACE.COM File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽYTKOWNIK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\V9964HLI.DEFAULT\EXTENSIONS\YOUTUBEDOWNLOADER@PETEROLAYEV.COM [2011-05-11 11:04:26 | 000,000,000 | ---D | M] (AVG Safe Search) -- C:\PROGRAM FILES\AVG\AVG10\FIREFOX [2009-10-26 18:51:28 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2010-11-12 19:53:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll [2010-12-11 15:11:40 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2010-12-11 15:11:40 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2010-12-11 15:11:40 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2010-12-11 15:11:40 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2010-12-11 15:11:40 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2010-12-11 15:11:40 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2010-09-26 00:20:12 | 000,001,054 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 static3.cdn.ubi.com O1 - Hosts: 127.0.0.1 ubisoft-orbit.s3.amazonaws.com O1 - Hosts: 127.0.0.1 onlineconfigservice.ubi.com O1 - Hosts: 127.0.0.1 orbitservice.ubi.com O1 - Hosts: 127.0.0.1 ubisoft-orbit-savegames.s3.amazonaws.com O2 - BHO: (FGCatchUrl) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll (www.flashget.com) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (FlashGet GetFlash Class) - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll (www.flashget.com) O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe () O4 - HKCU..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKCU..\Run: [KiesHelper] C:\Program Files\Samsung\Kies\KiesHelper.exe (Samsung) O4 - HKCU..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.) O4 - HKCU..\Run: [NVIDIA nTune] C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe (NVIDIA) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\JC_ALL.HTM () O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\JC_LINK.HTM () O8 - Extra context menu item: Download by FlashGet3 - C:\Documents and Settings\Użytkownik\Dane aplikacji\FlashGetBHO\GetUrl.htm () O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.152.34 194.204.159.1 O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-09-27 12:20:20 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{6eeba7f8-af66-11de-83a2-0008a1b74f2b}\Shell - "" = AutoRun O33 - MountPoints2\{6eeba7f8-af66-11de-83a2-0008a1b74f2b}\Shell\AutoRun\command - "" = I:\LaunchU3.exe -a O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync) - C:\Program Files\AVG\AVG10\avgchsvx.exe (AVG Technologies CZ, s.r.o.) O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart) - C:\Program Files\AVG\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-06-17 15:27:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Malwarebytes [2011-06-17 15:27:05 | 000,039,984 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2011-06-17 15:27:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes' Anti-Malware [2011-06-17 15:27:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes [2011-06-17 15:26:57 | 000,022,712 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2011-06-17 15:26:57 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2011-06-17 15:10:56 | 009,435,312 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\Użytkownik\Pulpit\mbam-setup-1.51.0.1200_[www.programosy.pl].exe [2011-06-17 14:44:11 | 000,000,000 | ---D | C] -- C:\_OTL [2011-06-16 21:43:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Silverlight [2011-06-16 17:58:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Menu Start\Programy\HiJackThis [2011-06-16 17:49:32 | 000,000,000 | ---D | C] -- C:\Qoobox [2011-06-16 17:45:59 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Użytkownik\Menu Start\Programy\Narzędzia administracyjne [2011-06-16 17:44:14 | 000,607,310 | R--- | C] (Swearware) -- C:\Documents and Settings\Użytkownik\Pulpit\dds.scr [2011-06-16 17:43:33 | 004,128,845 | ---- | C] (Swearware) -- C:\Documents and Settings\Użytkownik\Pulpit\ComboFix.exe.part [2011-06-16 17:29:16 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Użytkownik\Pulpit\OTL.exe [2011-06-10 17:22:54 | 000,000,000 | ---D | C] -- C:\Fraps [2011-06-10 17:22:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Menu Start\Programy\Fraps [2011-06-10 17:22:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Pulpit\FRAPS 2.9.5 FULL byHunter [2011-06-10 16:06:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Game Cam v1.4.0.5 [2011-06-10 16:06:30 | 000,000,000 | ---D | C] -- C:\Program Files\Game Cam v1.4.0.5 [2011-06-10 15:15:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\gctmp [2011-06-10 15:15:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\Xenocode [2011-06-10 14:57:12 | 000,309,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmv8dmod.dll [2011-06-10 14:57:12 | 000,241,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mp4sds32.ax [2011-05-31 16:35:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Pulpit\ekotoksykologia [2011-05-26 23:10:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\.thumbnails [2011-05-26 23:10:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\gtk-2.0 [2011-05-26 23:09:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Moje dokumenty\gegl-0.0 [2011-05-26 23:09:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\.gimp-2.6 [2011-05-26 23:09:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\GIMP [2011-05-26 23:09:35 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP-2.0 [2011-05-22 22:24:59 | 000,944,232 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvdispco3220140.dll [2011-05-22 22:24:59 | 000,855,656 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvgenco322060.dll [2011-05-22 21:27:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood(2) [2011-05-21 16:44:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\DisneyInteractiveStudios [2011-05-20 17:51:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Moje dokumenty\Witcher 2 [2011-05-20 17:51:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\The Witcher 2 [2011-05-20 17:47:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Wiedźmin 2 [2010-07-31 23:15:42 | 009,963,457 | ---- | C] (Boilsoft, Inc. ) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\bsvideojoiner.exe [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-06-17 15:35:57 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-06-17 15:35:51 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-06-17 15:27:05 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk [2011-06-17 15:11:36 | 009,435,312 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\Użytkownik\Pulpit\mbam-setup-1.51.0.1200_[www.programosy.pl].exe [2011-06-17 15:11:29 | 000,302,592 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\bm3yp3c9.exe [2011-06-17 12:00:47 | 118,878,779 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm [2011-06-16 21:43:25 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2011-06-16 21:39:13 | 000,038,912 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-06-16 21:27:20 | 100,857,600 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\You_rang__M_Lord.101.Pilot.part2.rar [2011-06-16 21:12:36 | 000,072,288 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\Obraz.png [2011-06-16 20:00:24 | 277,125,120 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\You rang, M'Lord.102.The.phantom.sign.writer.avi [2011-06-16 17:59:00 | 000,002,453 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\HiJackThis.lnk [2011-06-16 17:58:41 | 001,402,880 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\HiJackThis.msi [2011-06-16 17:53:55 | 000,013,139 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\bez tytułu.JPG [2011-06-16 17:50:59 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2011-06-16 17:45:27 | 004,128,845 | ---- | M] (Swearware) -- C:\Documents and Settings\Użytkownik\Pulpit\ComboFix.exe.part [2011-06-16 17:44:40 | 000,607,310 | R--- | M] (Swearware) -- C:\Documents and Settings\Użytkownik\Pulpit\dds.scr [2011-06-16 17:44:33 | 000,002,498 | ---- | M] () -- C:\WINDOWS\kaillera.ini [2011-06-16 17:29:24 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Użytkownik\Pulpit\OTL.exe [2011-06-15 22:08:32 | 100,857,600 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\You_rang__M_Lord.101.Pilot.part1.rar [2011-06-11 23:11:21 | 004,059,184 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\Ggwru94iKkIx.128.mp3 [2011-06-11 14:14:57 | 000,061,340 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\witcher2 2011-06-11 14-12-44-90.JPG [2011-06-10 21:38:29 | 000,072,802 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\snapshot20110610213824.bmp.jpg [2011-06-10 19:35:11 | 001,146,442 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\bez tytułu.bmp [2011-06-10 17:22:55 | 000,000,488 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\Fraps.lnk [2011-06-10 17:22:38 | 003,484,677 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\FRAPS 2.9.5 FULL.exe [2011-06-10 16:06:32 | 003,540,813 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\PanelTweaks-87-1-1.zip [2011-06-10 16:06:32 | 000,001,787 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Profile Manager.lnk [2011-06-10 16:06:32 | 000,001,750 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Game Cam.lnk [2011-06-10 16:05:42 | 003,549,172 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\GameCam_v1.4.0.5_Registered.rar [2011-06-03 14:08:11 | 000,000,720 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\AVG 2011.lnk [2011-05-31 20:42:59 | 000,667,344 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\mp3gain-win-1_2_5.exe [2011-05-31 00:12:42 | 005,964,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtml.dll [2011-05-30 19:16:39 | 000,022,554 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\seminarium.pdf [2011-05-29 09:11:30 | 000,039,984 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2011-05-29 09:11:20 | 000,022,712 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2011-05-27 18:56:31 | 000,031,941 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\mk3-10355.wma [2011-05-27 18:55:37 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Użytkownik\mk3-10355.wma [2011-05-27 15:53:35 | 000,000,873 | ---- | M] () -- C:\Documents and Settings\Użytkownik\.recently-used.xbel [2011-05-26 23:09:51 | 000,000,796 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\GIMP 2.lnk [2011-05-26 22:03:08 | 000,139,620 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\Obraz.jpg [2011-05-26 22:03:08 | 000,139,620 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\jeden.dup [2011-05-26 22:03:01 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Obraz.xcf [2011-05-22 22:32:06 | 000,259,604 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb1.bin [2011-05-22 22:32:06 | 000,000,001 | ---- | M] () -- C:\WINDOWS\System32\nvdrssel.bin [2011-05-22 22:32:05 | 000,259,604 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb0.bin [2011-05-22 22:18:36 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2011-05-20 17:47:33 | 000,000,419 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Uruchom Wiedźmin 2.lnk [2011-05-18 18:24:24 | 000,503,070 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2011-05-18 18:24:24 | 000,443,724 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2011-05-18 18:24:24 | 000,090,292 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2011-05-18 18:24:24 | 000,071,982 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-06-17 15:27:05 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk [2011-06-17 15:11:18 | 000,302,592 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\bm3yp3c9.exe [2011-06-16 21:19:56 | 100,857,600 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\You_rang__M_Lord.101.Pilot.part2.rar [2011-06-16 19:40:29 | 277,125,120 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\You rang, M'Lord.102.The.phantom.sign.writer.avi [2011-06-16 17:58:55 | 000,002,453 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\HiJackThis.lnk [2011-06-16 17:58:32 | 001,402,880 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\HiJackThis.msi [2011-06-15 22:01:48 | 100,857,600 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\You_rang__M_Lord.101.Pilot.part1.rar [2011-06-12 12:35:41 | 000,001,612 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\Samsung Kies.lnk [2011-06-11 23:05:27 | 004,059,184 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\Ggwru94iKkIx.128.mp3 [2011-06-11 14:14:57 | 000,061,340 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\witcher2 2011-06-11 14-12-44-90.JPG [2011-06-10 21:38:29 | 000,072,802 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\snapshot20110610213824.bmp.jpg [2011-06-10 19:35:11 | 001,146,442 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\bez tytułu.bmp [2011-06-10 17:22:55 | 000,000,488 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\Fraps.lnk [2011-06-10 17:22:23 | 003,484,677 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\FRAPS 2.9.5 FULL.exe [2011-06-10 16:06:32 | 000,001,787 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Profile Manager.lnk [2011-06-10 16:06:32 | 000,001,750 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Game Cam.lnk [2011-06-10 16:06:19 | 003,540,813 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\PanelTweaks-87-1-1.zip [2011-06-10 16:05:30 | 003,549,172 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\GameCam_v1.4.0.5_Registered.rar [2011-06-04 14:40:50 | 000,072,288 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\Obraz.png [2011-05-31 20:42:50 | 000,667,344 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\mp3gain-win-1_2_5.exe [2011-05-30 19:16:38 | 000,022,554 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\seminarium.pdf [2011-05-28 13:04:01 | 000,013,139 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\bez tytułu.JPG [2011-05-27 18:55:39 | 000,031,941 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\mk3-10355.wma [2011-05-27 18:55:37 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Użytkownik\mk3-10355.wma [2011-05-27 15:53:35 | 000,000,873 | ---- | C] () -- C:\Documents and Settings\Użytkownik\.recently-used.xbel [2011-05-26 23:09:51 | 000,000,796 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\GIMP 2.lnk [2011-05-26 22:13:14 | 000,139,620 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\jeden.dup [2011-05-26 22:03:04 | 000,139,620 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\Obraz.jpg [2011-05-26 22:03:01 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Obraz.xcf [2011-05-22 22:24:59 | 002,116,894 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin [2011-05-20 17:47:33 | 000,000,419 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Uruchom Wiedźmin 2.lnk [2011-04-18 21:25:10 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll [2011-04-18 21:25:10 | 000,042,112 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys [2011-03-17 10:12:00 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\LocalService\Dane aplikacji\$_hpcst$.hpc [2011-03-17 00:12:47 | 000,594,376 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2011-02-03 16:41:14 | 001,970,176 | ---- | C] () -- C:\WINDOWS\System32\d3dx9.dll [2011-01-27 10:53:33 | 000,011,376 | ---- | C] () -- C:\WINDOWS\ATM.INI [2011-01-27 10:53:33 | 000,001,720 | ---- | C] () -- C:\WINDOWS\MGX.INI [2011-01-27 10:53:33 | 000,000,498 | ---- | C] () -- C:\WINDOWS\DS40.INI [2011-01-27 10:53:13 | 000,115,904 | ---- | C] () -- C:\WINDOWS\ATMCNTRL.EXE [2011-01-27 10:53:13 | 000,000,306 | ---- | C] () -- C:\WINDOWS\SMARTSEP.INI [2011-01-15 15:03:17 | 000,000,000 | ---- | C] () -- C:\WINDOWS\dvdsnapshot.dat [2011-01-04 17:10:56 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll [2011-01-04 17:10:56 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll [2011-01-04 17:10:56 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll [2011-01-04 17:10:56 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll [2011-01-04 16:10:58 | 000,030,568 | ---- | C] () -- C:\WINDOWS\MusiccityDownload.exe [2010-12-20 19:52:47 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll [2010-12-04 22:51:11 | 000,259,604 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin [2010-12-04 22:51:09 | 000,259,604 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin [2010-12-04 22:51:09 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin [2010-12-04 15:56:49 | 000,010,084 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvphy.bin [2010-10-16 12:57:05 | 000,024,576 | ---- | C] () -- C:\WINDOWS\MadUnInst.exe [2010-10-10 19:13:19 | 000,000,069 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Dane aplikacji\joiner.ini [2010-09-13 17:29:08 | 000,281,504 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys [2010-09-13 17:29:08 | 000,025,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys [2010-06-16 19:08:43 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI [2010-06-15 14:06:52 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Dane aplikacji\$_hpcst$.hpc [2010-06-03 15:13:34 | 000,000,061 | ---- | C] () -- C:\WINDOWS\Emu48.ini [2010-05-30 13:56:41 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll [2010-05-01 23:29:17 | 000,000,085 | ---- | C] () -- C:\WINDOWS\QTW.INI [2010-04-15 23:08:34 | 000,344,329 | ---- | C] () -- C:\WINDOWS\CSUPP.EXE [2010-02-12 12:31:00 | 000,336,896 | ---- | C] () -- C:\WINDOWS\System32\ammppg.dll [2010-02-12 12:31:00 | 000,303,104 | ---- | C] () -- C:\WINDOWS\System32\qscl.dll [2010-02-12 12:31:00 | 000,233,472 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll [2010-02-12 12:31:00 | 000,212,992 | ---- | C] () -- C:\WINDOWS\System32\amrdec.dll [2010-02-12 12:31:00 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\qcpsdk.dll [2010-02-12 12:31:00 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\a1.dll [2010-01-31 00:03:20 | 000,000,753 | ---- | C] () -- C:\WINDOWS\Gfact.ini [2010-01-31 00:03:20 | 000,000,027 | ---- | C] () -- C:\WINDOWS\gdx.ini [2010-01-08 18:01:20 | 000,000,505 | ---- | C] () -- C:\WINDOWS\n02.ini [2010-01-06 20:40:14 | 000,000,071 | ---- | C] () -- C:\WINDOWS\DEMO.INI [2009-12-17 22:47:13 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2009-12-16 20:02:13 | 000,000,135 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2009-12-09 17:24:20 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2009-12-01 23:56:45 | 000,087,552 | ---- | C] () -- C:\WINDOWS\System32\cpwmon2k.dll [2009-11-29 18:33:11 | 000,002,498 | ---- | C] () -- C:\WINDOWS\kaillera.ini [2009-10-18 18:52:46 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009-10-17 17:02:22 | 000,000,251 | ---- | C] () -- C:\WINDOWS\PowerReg.dat [2009-10-16 21:55:44 | 000,003,528 | ---- | C] () -- C:\WINDOWS\System32\secushr.dat [2009-10-12 18:57:01 | 000,000,732 | ---- | C] () -- C:\WINDOWS\System32\secustat.dat [2009-10-12 18:55:57 | 000,000,025 | ---- | C] () -- C:\WINDOWS\libem.INI [2009-10-10 14:21:59 | 000,000,312 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\links.cfg [2009-10-08 15:38:32 | 005,640,880 | ---- | C] () -- C:\WINDOWS\System32\SpoonUninstall.exe [2009-10-03 15:14:15 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2009-10-03 15:14:14 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2009-10-03 15:14:14 | 002,041,363 | ---- | C] () -- C:\WINDOWS\System32\x264vfw.dll [2009-10-03 15:14:14 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-10-02 20:55:23 | 002,392,064 | ---- | C] () -- C:\WINDOWS\System32\videotrans.dll [2009-10-02 20:55:23 | 000,215,040 | ---- | C] () -- C:\WINDOWS\System32\videoformat.dll [2009-10-02 20:55:23 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\imgscaler.dll [2009-10-02 20:55:23 | 000,022,016 | ---- | C] () -- C:\WINDOWS\System32\img_utils.dll [2009-10-02 20:55:23 | 000,017,920 | ---- | C] () -- C:\WINDOWS\System32\videocore.dll [2009-10-02 20:55:22 | 000,128,512 | ---- | C] () -- C:\WINDOWS\System32\xvid.dll [2009-10-02 20:20:07 | 000,038,912 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-10-01 19:16:29 | 000,376,832 | ---- | C] () -- C:\WINDOWS\System32\AegisI5Installer.exe [2009-10-01 19:16:24 | 000,002,048 | ---- | C] () -- C:\WINDOWS\System32\rt73.bin [2009-09-28 17:10:02 | 000,086,528 | ---- | C] () -- C:\WINDOWS\bnetunin.exe [2009-09-28 11:55:52 | 000,000,452 | ---- | C] () -- C:\WINDOWS\Game.INI [2009-09-27 14:35:30 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2009-09-27 14:24:58 | 000,000,090 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2009-09-27 14:11:28 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2009-09-27 14:08:54 | 000,138,056 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2009-09-27 12:21:49 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2009-09-27 12:18:18 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2009-06-07 16:24:04 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-06-07 16:16:12 | 000,217,088 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2008-04-15 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2008-04-15 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2008-04-15 14:00:00 | 000,503,070 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2008-04-15 14:00:00 | 000,443,724 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2008-04-15 14:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2008-04-15 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2008-04-15 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2008-04-15 14:00:00 | 000,090,292 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2008-04-15 14:00:00 | 000,071,982 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2008-04-15 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2008-04-15 14:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2008-04-15 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2008-04-15 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2008-04-15 14:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2008-04-15 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin [2008-04-15 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [2007-03-12 13:01:30 | 000,217,088 | ---- | C] () -- C:\WINDOWS\NVGfxOgl.dll [2003-04-08 11:40:22 | 000,005,679 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI [1999-09-28 16:58:21 | 000,005,647 | ---- | C] () -- C:\WINDOWS\System32\HDK3CRYP.DLL [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:05EE1EEF @Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:C8B8CEBD < End of report >

Malware

Kod: Zaznacz wszystko: Malwarebytes' Anti-Malware 1.51.0.1200 www.malwarebytes.org Wersja bazy: 6877 Windows 5.1.2600 Dodatek Service Pack 3 Internet Explorer 8.0.6001.18702 2011-06-17 16:46:07 mbam-log-2011-06-17 (16-46-07).txt Typ skanowania: Pełne skanowanie Przeskanowano obiektów: 180232 Upłynęło: 59 minut(y), 32 sekund(y) Zainfekowanych procesów w pamięci: 0 Zainfekowanych modułów w pamięci: 0 Zainfekowanych kluczy rejestru: 6 Zainfekowanych wartości rejestru: 0 Zainfekowane informacje rejestru systemowego: 0 Zainfekowanych folderów: 0 Zainfekowanych plików: 0 Zainfekowanych procesów w pamięci: (Nie znaleziono zagrożeń) Zainfekowanych modułów w pamięci: (Nie znaleziono zagrożeń) Zainfekowanych kluczy rejestru: HKEY_CURRENT_USER\SOFTWARE\D9Q071WKGS (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\QZAIB7KITK (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\TOY5KNQ8OC (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\YNO00BFRKM (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\Software\WEK9EMDHI9 (Trojan.Agent) -> Quarantined and deleted successfully. Zainfekowanych wartości rejestru: (Nie znaleziono zagrożeń) Zainfekowane informacje rejestru systemowego: (Nie znaleziono zagrożeń) Zainfekowanych folderów: (Nie znaleziono zagrożeń) Zainfekowanych plików: (Nie znaleziono zagrożeń)

Próba uruchomienia Gmera kończy się niebieskim ekranem z błędami i resetem komputera (po usunięciu Daemona i pliku stpd.sys).

**Posty:** 18165 · przez **wojtas** 18 Cze 2011, 19:22

sprobuj w trybie awaryjnym Gmera, daj drugi log z OTL

zaznacz opcje w OTL tak jak na rysunku w przyklejonym

**Posty:** 448 · przez **kamiledi15** 02 Lip 2011, 17:31

Log z OTL już po wgraniu tego skryptu jest przecież w poprzednim poście, więc nie wiem, o co chodzi. Opcje od początku miałem zaznaczone tak jak na rysunku. Gmer niestety wywala niebieski ekran również w trybie awaryjnym.

**Posty:** 18165 · przez **wojtas** 02 Lip 2011, 17:40

Gmer wywala bo jest :

DRV - [2010-09-13 17:29:08 | 000,281,504 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2010-09-13 17:29:08 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)

czy na pewno odinstalowałeś Deamony, Alcohole i tego typu programy?

nie zaznaczyłeś tak na rysunku , bo nie masz loga extras.txt z OTL.. nie zaznaczyłeś rejestr skan dodatkowy -> użyj filtrowania.....

**Posty:** 448 · przez **kamiledi15** 03 Lip 2011, 12:33

Odinstalowałem na pewno, z tego typu programów mam tylko Daemona. Mam też Nero, ale moja wersja nie ma funkcji tworzenia wirtualnych dysków, więc go nie wywalałem. Mimo wywalenia Daemona zauważyłem, że w system32 nadal były te dwa pliki sys, więc wywaliłem je ręcznie. Potem znowu zrobiłem skan OTL i widzę, że teraz nadal próbuje uruchomić te pliki, tyle że już ich nie ma. Nie wiem, co jeszcze mogę zrobić...
Daję jeszcze raz logi z OTL:

Kod: Zaznacz wszystko: OTL logfile created on: 2011-07-03 12:27:06 - Run 6 OTL by OldTimer - Version 3.2.25.0 Folder = C:\Documents and Settings\Użytkownik\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,50 Gb Total Physical Memory | 2,68 Gb Available Physical Memory | 76,66% Memory free 7,34 Gb Paging File | 6,64 Gb Available in Paging File | 90,55% Paging File free Paging file location(s): [Binary data over 100 bytes] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 97,65 Gb Total Space | 14,69 Gb Free Space | 15,04% Space Free | Partition Type: NTFS Drive E: | 97,65 Gb Total Space | 74,33 Gb Free Space | 76,12% Space Free | Partition Type: NTFS Drive F: | 102,77 Gb Total Space | 51,48 Gb Free Space | 50,09% Space Free | Partition Type: NTFS Computer Name: W-4E1E25B952BE4 | User Name: Użytkownik | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-07-03 12:25:05 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2011-07-03 11:22:35 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Użytkownik\Pulpit\OTL.exe PRC - [2011-04-18 17:40:08 | 002,334,560 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgtray.exe PRC - [2011-04-18 17:39:42 | 007,398,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe PRC - [2011-04-14 05:36:42 | 001,080,672 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgnsx.exe PRC - [2011-04-08 07:14:00 | 002,218,600 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe PRC - [2011-03-16 16:05:14 | 000,656,736 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgchsvx.exe PRC - [2011-02-10 07:55:18 | 001,148,256 | ---- | M] () -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe PRC - [2011-02-08 05:33:42 | 000,269,520 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgwdsvc.exe PRC - [2011-02-08 05:33:20 | 000,658,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgrsx.exe PRC - [2011-01-05 22:23:48 | 000,222,568 | ---- | M] (Teruten) -- C:\WINDOWS\system32\FsUsbExService.Exe PRC - [2010-12-16 07:19:28 | 012,984,928 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-07-03 11:22:35 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Użytkownik\Pulpit\OTL.exe MOD - [2010-08-23 18:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- -- (HidServ) SRV - [2011-04-18 17:39:42 | 007,398,752 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent) SRV - [2011-04-08 07:14:00 | 002,218,600 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2011-02-08 05:33:42 | 000,269,520 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\avgwdsvc.exe -- (avgwd) SRV - [2011-01-05 22:23:48 | 000,222,568 | ---- | M] (Teruten) [Auto | Running] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService) SRV - [2007-09-04 20:25:44 | 000,131,072 | ---- | M] (NVIDIA) [Disabled | Stopped] -- C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe -- (nTuneService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-04-14 21:28:42 | 000,134,480 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver) DRV - [2011-04-05 00:59:56 | 000,297,168 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (Avgtdix) DRV - [2011-03-16 16:03:20 | 000,032,592 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\avgrkx86.sys -- (Avgrkx86) DRV - [2011-03-01 14:25:18 | 000,034,896 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (Avgmfx86) DRV - [2011-02-22 08:13:02 | 000,022,992 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys -- (AVGIDSEH) DRV - [2011-02-10 07:53:54 | 000,027,216 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSShim.sys -- (AVGIDSShim) DRV - [2011-02-10 07:53:52 | 000,024,144 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter) DRV - [2011-01-07 06:41:46 | 000,248,656 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (Avgldx86) DRV - [2011-01-05 22:23:40 | 000,042,112 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk) DRV - [2011-01-04 16:10:54 | 000,018,120 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\dgderdrv.sys -- (dgderdrv) DRV - [2011-01-03 10:38:36 | 000,136,680 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdm.sys -- (ssadmdm) DRV - [2011-01-03 10:38:36 | 000,121,192 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM) DRV - [2011-01-03 10:38:36 | 000,114,152 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadserd.sys -- (ssadserd) SAMSUNG Android USB Diagnostic Serial Port (WDM) DRV - [2011-01-03 10:38:36 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter) DRV - [2010-12-21 07:55:02 | 000,132,424 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdm.sys -- (sscdmdm) DRV - [2010-12-21 07:55:02 | 000,104,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM) DRV - [2010-12-21 07:55:02 | 000,030,312 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadadb.sys -- (androidusb) DRV - [2010-12-21 07:55:02 | 000,014,920 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdfl.sys -- (sscdmdfl) DRV - [2010-04-08 20:30:10 | 000,168,040 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvgts.sys -- (nvgts) DRV - [2010-03-04 12:02:10 | 000,013,824 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus) DRV - [2010-03-04 12:02:08 | 000,070,912 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD) DRV - [2010-02-03 16:56:56 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2009-11-19 14:33:20 | 000,051,200 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ser2pl.sys -- (Ser2pl) DRV - [2009-08-05 21:37:04 | 000,039,112 | ---- | M] (GBM Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\GRemoteJoy.sys -- (GRemoteJoy) DRV - [2009-08-05 21:37:04 | 000,023,368 | ---- | M] (GBM Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\GRemoteBus.sys -- (GRemoteBus) DRV - [2008-12-11 11:24:20 | 004,959,232 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2008-08-24 13:55:50 | 000,030,464 | ---- | M] (CamTrax Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CamSpaceJoy.sys -- (CamSpaceJoy) DRV - [2008-08-24 13:55:48 | 000,014,848 | ---- | M] (CamTrax Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CamSpaceBus.sys -- (CamSpaceBus) DRV - [2008-01-15 21:50:50 | 000,459,520 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rt73.sys -- (RT73) DRV - [2007-09-04 20:26:32 | 000,029,696 | ---- | M] (NVidia Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\nvoclock.sys -- (NVR0Dev) DRV - [2007-06-29 14:47:34 | 000,034,304 | ---- | M] (AMD, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AmdLLD.sys -- (AmdLLD) DRV - [2006-07-01 23:32:26 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8) DRV - [2004-10-24 08:11:00 | 000,028,800 | ---- | M] (Deon van der Westhuysen) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PPortJoy.sys -- (PPortJoystick) DRV - [2004-10-24 08:11:00 | 000,013,952 | ---- | M] (Deon van der Westhuysen) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PPJoyBus.sys -- (PPJoyBus) DRV - [2002-07-17 10:05:10 | 000,016,512 | ---- | M] (Adaptec) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ASPI32.SYS -- (ASPI) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1482476501-682003330-1676017868-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = IE - HKU\S-1-5-21-1482476501-682003330-1676017868-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = IE - HKU\S-1-5-21-1482476501-682003330-1676017868-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/ IE - HKU\S-1-5-21-1482476501-682003330-1676017868-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultthis.engineName: "free-downloads.net Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1098640&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.selectedEngine: "free-downloads.net Customized Web Search" FF - prefs.js..browser.startup.homepage: "google.pl" FF - prefs.js..extensions.enabledItems: YoutubeDownloader@PeterOlayev.com:1.5 FF - prefs.js..extensions.enabledItems: {1E73965B-8B48-48be-9C8D-68B920ABC1C4}:10.0.0.1387 FF - prefs.js..extensions.enabledItems: firefox-plugin@camspace.com:1.0.1.35 FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9 FF - prefs.js..extensions.enabledItems: {ecdee021-0d17-467f-a1ff-c7a115230949}:2.5.6.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1098640&q=" FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG10\Firefox\ [2011-06-24 13:44:00 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG10\Firefox4\ [2011-06-24 13:44:04 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.18\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-07-03 12:25:21 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.18\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-07-03 12:25:21 | 000,000,000 | ---D | M] [2009-12-15 17:49:56 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Extensions [2011-07-03 10:56:21 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\v9964hli.default\extensions [2011-06-14 15:27:46 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\v9964hli.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011-06-14 15:27:44 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\v9964hli.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2011-06-19 12:25:23 | 000,000,000 | ---D | M] (free-downloads.net Toolbar) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\v9964hli.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949} [2010-09-23 11:55:28 | 000,000,000 | ---D | M] (CamSpace plugin for Firefox) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\v9964hli.default\extensions\firefox-plugin@camspace.com [2011-06-14 15:27:45 | 000,000,000 | ---D | M] (1-Click YouTube Video Downloader) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\v9964hli.default\extensions\YoutubeDownloader@PeterOlayev.com [2010-01-20 12:16:28 | 000,000,939 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\v9964hli.default\searchplugins\conduit.xml [2011-07-03 10:56:21 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-01-29 15:18:28 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽYTKOWNIK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\V9964HLI.DEFAULT\EXTENSIONS\{20A82645-C095-46ED-80E3-08825760534B} File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽYTKOWNIK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\V9964HLI.DEFAULT\EXTENSIONS\{B9DB16A4-6EDC-47EC-A1F4-B86292ED211D} File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽYTKOWNIK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\V9964HLI.DEFAULT\EXTENSIONS\{ECDEE021-0D17-467F-A1FF-C7A115230949} File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽYTKOWNIK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\V9964HLI.DEFAULT\EXTENSIONS\FIREFOX-PLUGIN@CAMSPACE.COM File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽYTKOWNIK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\V9964HLI.DEFAULT\EXTENSIONS\YOUTUBEDOWNLOADER@PETEROLAYEV.COM [2011-06-24 13:44:04 | 000,000,000 | ---D | M] (AVG Safe Search) -- C:\PROGRAM FILES\AVG\AVG10\FIREFOX4 [2009-10-26 18:51:28 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2010-11-12 19:53:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011-07-03 12:25:11 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2011-07-03 12:25:11 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2011-07-03 12:25:11 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2011-07-03 12:25:11 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2011-07-03 12:25:11 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-07-03 12:25:11 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2010-09-26 00:20:12 | 000,001,054 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 static3.cdn.ubi.com O1 - Hosts: 127.0.0.1 ubisoft-orbit.s3.amazonaws.com O1 - Hosts: 127.0.0.1 onlineconfigservice.ubi.com O1 - Hosts: 127.0.0.1 orbitservice.ubi.com O1 - Hosts: 127.0.0.1 ubisoft-orbit-savegames.s3.amazonaws.com O2 - BHO: (FGCatchUrl) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll (www.flashget.com) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (FlashGet GetFlash Class) - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll (www.flashget.com) O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe () O4 - HKU\S-1-5-21-1482476501-682003330-1676017868-1003..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKU\S-1-5-21-1482476501-682003330-1676017868-1003..\Run: [NVIDIA nTune] C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe (NVIDIA) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1482476501-682003330-1676017868-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1482476501-682003330-1676017868-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\JC_ALL.HTM () O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\JC_LINK.HTM () O8 - Extra context menu item: Download by FlashGet3 - C:\Documents and Settings\Użytkownik\Dane aplikacji\FlashGetBHO\GetUrl.htm () O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.152.34 194.204.159.1 O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-09-27 12:20:20 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{6eeba7f8-af66-11de-83a2-0008a1b74f2b}\Shell - "" = AutoRun O33 - MountPoints2\{6eeba7f8-af66-11de-83a2-0008a1b74f2b}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync) - C:\Program Files\AVG\AVG10\avgchsvx.exe (AVG Technologies CZ, s.r.o.) O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart) - C:\Program Files\AVG\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-07-03 11:36:36 | 000,607,288 | ---- | C] (Duplex Secure Ltd.) -- C:\Documents and Settings\Użytkownik\Pulpit\SPTDinst-v178-x86.exe [2011-07-03 11:22:29 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Użytkownik\Pulpit\OTL.exe [2011-06-25 15:14:44 | 000,000,000 | ---D | C] -- C:\Fraps [2011-06-25 15:14:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Menu Start\Programy\Fraps [2011-06-25 12:23:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Pulpit\MP3 [2011-06-23 17:13:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\boost_interprocess [2011-06-23 17:13:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\NAVIGON [2011-06-21 22:21:55 | 000,000,000 | ---D | C] -- C:\Program Files\Lavalys [2011-06-21 14:58:45 | 000,077,824 | ---- | C] (Fox Magic Software) -- C:\WINDOWS\System32\fmcodec.DLL [2011-06-21 14:58:45 | 000,000,000 | ---D | C] -- C:\Program Files\Fox Magic [2011-06-21 14:58:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Fox Magic [2011-06-19 12:25:25 | 000,000,000 | ---D | C] -- C:\Program Files\Conduit [2011-06-19 12:25:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\Conduit [2011-06-19 12:24:50 | 000,000,000 | ---D | C] -- C:\Program Files\Alcohol Soft [2011-06-17 15:27:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Malwarebytes [2011-06-17 15:27:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes [2011-06-17 15:26:57 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2011-06-16 17:45:59 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Użytkownik\Menu Start\Programy\Narzędzia administracyjne [2011-06-10 15:15:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\gctmp [2011-06-10 15:15:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\Xenocode [2011-06-10 14:57:12 | 000,309,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmv8dmod.dll [2011-06-10 14:57:12 | 000,241,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mp4sds32.ax [2010-07-31 23:15:42 | 009,963,457 | ---- | C] (Boilsoft, Inc. ) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\bsvideojoiner.exe [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-07-03 12:24:09 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-07-03 12:24:02 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-07-03 12:10:40 | 003,068,759 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\T.S.Pro.v1.1.0.17.rar [2011-07-03 12:08:16 | 000,009,040 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\Touch Shell Pro 1.1.0.17 PL (by Wall-E).cab [2011-07-03 12:06:10 | 022,978,418 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\m2dwqvgav2 - PL.cab [2011-07-03 11:43:56 | 001,889,414 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\cliquick.4.4.SyMPDA_and_CBD.rar [2011-07-03 11:39:51 | 000,561,429 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\Poprwa jakosci.rar [2011-07-03 11:36:43 | 000,607,288 | ---- | M] (Duplex Secure Ltd.) -- C:\Documents and Settings\Użytkownik\Pulpit\SPTDinst-v178-x86.exe [2011-07-03 11:22:35 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Użytkownik\Pulpit\OTL.exe [2011-07-03 10:50:37 | 120,765,933 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm [2011-07-02 15:18:55 | 000,101,888 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-07-02 15:18:55 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2011-07-02 14:56:57 | 000,002,488 | ---- | M] () -- C:\WINDOWS\kaillera.ini [2011-06-29 20:54:55 | 000,302,592 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\yrklc20u.exe [2011-06-28 22:29:49 | 000,503,492 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2011-06-28 22:29:49 | 000,444,146 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2011-06-28 22:29:49 | 000,090,714 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2011-06-28 22:29:49 | 000,072,404 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2011-06-26 18:31:41 | 000,126,027 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\bez tytułu.JPG [2011-06-26 18:10:29 | 000,036,806 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\iavichjg.avm [2011-06-26 16:24:22 | 100,859,904 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\You_rang__M_Lord.202.Trouble.at.mill.part3.rar [2011-06-26 16:19:01 | 014,907,639 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\You_rang__M_Lord.202.Trouble.at.mill.part4.rar [2011-06-26 15:30:34 | 100,859,904 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\You_rang__M_Lord.202.Trouble.at.mill.part2.rar [2011-06-26 15:29:36 | 100,859,904 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\You_rang__M_Lord.202.Trouble.at.mill.part1.rar [2011-06-25 20:32:30 | 100,859,904 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\You_rang__M_Lord.201.Labour.or.love.part2.rar [2011-06-25 20:31:34 | 100,859,904 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\You_rang__M_Lord.201.Labour.or.love.part1.rar [2011-06-25 20:29:37 | 079,814,422 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\You_rang__M_Lord.201.Labour.or.love.part3.rar [2011-06-25 15:46:52 | 000,000,488 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\Fraps.lnk [2011-06-25 12:47:54 | 002,206,660 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\Autumn_Winds_preview_whitenoisemp3s-com.mp3 [2011-06-24 13:44:05 | 000,000,720 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\AVG 2011.lnk [2011-06-23 17:13:18 | 000,000,952 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\NAVIGON Fresh.lnk [2011-06-21 15:05:53 | 000,130,560 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\video.avi [2011-06-21 15:03:37 | 000,130,560 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\0001.avi [2011-06-21 14:58:45 | 000,001,861 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Pulpit\ScreenVirtuoso PRO.lnk [2011-06-19 16:15:24 | 000,000,225 | RHS- | M] () -- C:\boot.ini [2011-06-19 12:37:40 | 000,000,124 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\ax_files.xml [2011-06-18 16:05:22 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ssadadb_01005.Wdf [2011-06-18 16:05:21 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf [2011-06-18 16:05:20 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-07-03 12:09:02 | 003,068,759 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\T.S.Pro.v1.1.0.17.rar [2011-07-03 12:08:12 | 000,009,040 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\Touch Shell Pro 1.1.0.17 PL (by Wall-E).cab [2011-07-03 12:04:27 | 022,978,418 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\m2dwqvgav2 - PL.cab [2011-07-03 11:43:35 | 001,889,414 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\cliquick.4.4.SyMPDA_and_CBD.rar [2011-07-03 11:39:49 | 000,561,429 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\Poprwa jakosci.rar [2011-06-29 20:54:50 | 000,302,592 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\yrklc20u.exe [2011-06-26 18:31:41 | 000,126,027 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\bez tytułu.JPG [2011-06-26 16:17:01 | 014,907,639 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\You_rang__M_Lord.202.Trouble.at.mill.part4.rar [2011-06-26 16:16:37 | 100,859,904 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\You_rang__M_Lord.202.Trouble.at.mill.part3.rar [2011-06-26 15:17:09 | 100,859,904 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\You_rang__M_Lord.202.Trouble.at.mill.part2.rar [2011-06-26 15:17:04 | 100,859,904 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\You_rang__M_Lord.202.Trouble.at.mill.part1.rar [2011-06-25 20:13:41 | 079,814,422 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\You_rang__M_Lord.201.Labour.or.love.part3.rar [2011-06-25 20:13:28 | 100,859,904 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\You_rang__M_Lord.201.Labour.or.love.part2.rar [2011-06-25 20:13:18 | 100,859,904 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\You_rang__M_Lord.201.Labour.or.love.part1.rar [2011-06-25 12:47:54 | 002,206,660 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\Autumn_Winds_preview_whitenoisemp3s-com.mp3 [2011-06-23 17:13:18 | 000,000,952 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\NAVIGON Fresh.lnk [2011-06-22 20:06:28 | 000,000,488 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\Fraps.lnk [2011-06-21 15:05:29 | 000,130,560 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\video.avi [2011-06-21 15:03:17 | 000,130,560 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\0001.avi [2011-06-21 14:58:45 | 000,001,861 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Pulpit\ScreenVirtuoso PRO.lnk [2011-06-19 12:37:40 | 000,000,124 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Moje dokumenty\ax_files.xml [2011-06-18 16:05:22 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ssadadb_01005.Wdf [2011-06-18 16:05:21 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf [2011-05-22 22:24:59 | 002,116,894 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin [2011-04-18 21:25:10 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll [2011-04-18 21:25:10 | 000,042,112 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys [2011-03-17 10:12:00 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\LocalService\Dane aplikacji\$_hpcst$.hpc [2011-03-17 00:12:47 | 000,594,376 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2011-02-03 16:41:14 | 001,970,176 | ---- | C] () -- C:\WINDOWS\System32\d3dx9.dll [2011-01-27 10:53:33 | 000,011,376 | ---- | C] () -- C:\WINDOWS\ATM.INI [2011-01-27 10:53:33 | 000,001,720 | ---- | C] () -- C:\WINDOWS\MGX.INI [2011-01-27 10:53:33 | 000,000,498 | ---- | C] () -- C:\WINDOWS\DS40.INI [2011-01-27 10:53:13 | 000,115,904 | ---- | C] () -- C:\WINDOWS\ATMCNTRL.EXE [2011-01-27 10:53:13 | 000,000,306 | ---- | C] () -- C:\WINDOWS\SMARTSEP.INI [2011-01-15 15:03:17 | 000,000,000 | ---- | C] () -- C:\WINDOWS\dvdsnapshot.dat [2011-01-04 17:10:56 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll [2011-01-04 17:10:56 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll [2011-01-04 17:10:56 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll [2011-01-04 17:10:56 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll [2011-01-04 16:10:58 | 000,030,568 | ---- | C] () -- C:\WINDOWS\MusiccityDownload.exe [2010-12-20 19:52:47 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll [2010-12-04 22:51:11 | 000,259,604 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin [2010-12-04 22:51:09 | 000,259,604 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin [2010-12-04 22:51:09 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin [2010-12-04 15:56:49 | 000,010,084 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvphy.bin [2010-10-16 12:57:05 | 000,024,576 | ---- | C] () -- C:\WINDOWS\MadUnInst.exe [2010-10-10 19:13:19 | 000,000,069 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Dane aplikacji\joiner.ini [2010-06-16 19:08:43 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI [2010-06-15 14:06:52 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Dane aplikacji\$_hpcst$.hpc [2010-06-03 15:13:34 | 000,000,061 | ---- | C] () -- C:\WINDOWS\Emu48.ini [2010-05-30 13:56:41 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll [2010-05-01 23:29:17 | 000,000,085 | ---- | C] () -- C:\WINDOWS\QTW.INI [2010-04-15 23:08:34 | 000,344,329 | ---- | C] () -- C:\WINDOWS\CSUPP.EXE [2010-02-12 12:31:00 | 000,336,896 | ---- | C] () -- C:\WINDOWS\System32\ammppg.dll [2010-02-12 12:31:00 | 000,303,104 | ---- | C] () -- C:\WINDOWS\System32\qscl.dll [2010-02-12 12:31:00 | 000,233,472 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll [2010-02-12 12:31:00 | 000,212,992 | ---- | C] () -- C:\WINDOWS\System32\amrdec.dll [2010-02-12 12:31:00 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\qcpsdk.dll [2010-02-12 12:31:00 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\a1.dll [2010-01-31 00:03:20 | 000,000,753 | ---- | C] () -- C:\WINDOWS\Gfact.ini [2010-01-31 00:03:20 | 000,000,027 | ---- | C] () -- C:\WINDOWS\gdx.ini [2010-01-08 18:01:20 | 000,000,505 | ---- | C] () -- C:\WINDOWS\n02.ini [2010-01-06 20:40:14 | 000,000,071 | ---- | C] () -- C:\WINDOWS\DEMO.INI [2009-12-17 22:47:13 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2009-12-16 20:02:13 | 000,000,135 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2009-12-09 17:24:20 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2009-12-01 23:56:45 | 000,087,552 | ---- | C] () -- C:\WINDOWS\System32\cpwmon2k.dll [2009-11-29 18:33:11 | 000,002,488 | ---- | C] () -- C:\WINDOWS\kaillera.ini [2009-10-18 18:52:46 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009-10-17 17:02:22 | 000,000,251 | ---- | C] () -- C:\WINDOWS\PowerReg.dat [2009-10-16 21:55:44 | 000,003,528 | ---- | C] () -- C:\WINDOWS\System32\secushr.dat [2009-10-12 18:57:01 | 000,000,732 | ---- | C] () -- C:\WINDOWS\System32\secustat.dat [2009-10-12 18:55:57 | 000,000,025 | ---- | C] () -- C:\WINDOWS\libem.INI [2009-10-10 14:21:59 | 000,000,312 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\links.cfg [2009-10-08 15:38:32 | 005,640,880 | ---- | C] () -- C:\WINDOWS\System32\SpoonUninstall.exe [2009-10-03 15:14:15 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2009-10-03 15:14:14 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2009-10-03 15:14:14 | 002,041,363 | ---- | C] () -- C:\WINDOWS\System32\x264vfw.dll [2009-10-03 15:14:14 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-10-02 20:55:23 | 002,392,064 | ---- | C] () -- C:\WINDOWS\System32\videotrans.dll [2009-10-02 20:55:23 | 000,215,040 | ---- | C] () -- C:\WINDOWS\System32\videoformat.dll [2009-10-02 20:55:23 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\imgscaler.dll [2009-10-02 20:55:23 | 000,022,016 | ---- | C] () -- C:\WINDOWS\System32\img_utils.dll [2009-10-02 20:55:23 | 000,017,920 | ---- | C] () -- C:\WINDOWS\System32\videocore.dll [2009-10-02 20:55:22 | 000,128,512 | ---- | C] () -- C:\WINDOWS\System32\xvid.dll [2009-10-02 20:20:07 | 000,101,888 | ---- | C] () -- C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-10-01 19:16:29 | 000,376,832 | ---- | C] () -- C:\WINDOWS\System32\AegisI5Installer.exe [2009-10-01 19:16:24 | 000,002,048 | ---- | C] () -- C:\WINDOWS\System32\rt73.bin [2009-09-28 17:10:02 | 000,086,528 | ---- | C] () -- C:\WINDOWS\bnetunin.exe [2009-09-28 11:55:52 | 000,000,452 | ---- | C] () -- C:\WINDOWS\Game.INI [2009-09-27 14:35:30 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2009-09-27 14:24:58 | 000,000,090 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2009-09-27 14:11:28 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2009-09-27 14:08:54 | 000,138,056 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2009-09-27 12:21:49 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2009-09-27 12:18:18 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2009-06-07 16:24:04 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-06-07 16:16:12 | 000,217,088 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2008-04-15 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2008-04-15 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2008-04-15 14:00:00 | 000,503,492 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2008-04-15 14:00:00 | 000,444,146 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2008-04-15 14:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2008-04-15 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2008-04-15 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2008-04-15 14:00:00 | 000,090,714 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2008-04-15 14:00:00 | 000,072,404 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2008-04-15 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2008-04-15 14:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2008-04-15 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2008-04-15 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2008-04-15 14:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2008-04-15 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin [2008-04-15 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [2007-03-12 13:01:30 | 000,217,088 | ---- | C] () -- C:\WINDOWS\NVGfxOgl.dll [2003-04-08 11:40:22 | 000,005,679 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI [1999-09-28 16:58:21 | 000,005,647 | ---- | C] () -- C:\WINDOWS\System32\HDK3CRYP.DLL [color=#E56717]========== LOP Check ==========[/color] [2011-02-02 14:19:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\AVG10 [2010-01-06 20:38:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\DAEMON Tools Lite [2011-02-03 23:07:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Gadu-Gadu 10 [2010-01-06 20:25:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\iZ3D Driver [2010-12-21 00:17:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG10 [2011-06-23 17:13:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\boost_interprocess [2010-12-07 11:45:18 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files [2011-05-18 14:27:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2010-11-08 13:47:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts [2011-01-24 13:33:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2011-02-10 19:00:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2010-04-11 10:59:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\LogSys [2011-05-06 18:43:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MFAData [2009-11-02 20:03:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\nHancer [2011-04-18 21:31:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Samsung [2009-10-05 18:48:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sony [2010-11-30 16:54:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TechSmith [2011-07-02 14:33:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2010-11-10 20:15:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ubisoft [2009-10-02 21:42:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UĹĽytkownik\Dane aplikacji\Moyea [2010-11-21 18:20:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\.minecraft [2010-04-16 18:57:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Activision [2011-06-05 15:32:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Any Video Converter [2010-12-17 21:16:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\AVG10 [2010-10-28 18:37:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\AVI ReComp [2009-10-09 16:21:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\BITS [2010-04-13 16:01:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Blueberry [2010-10-22 19:07:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Braid [2010-01-31 00:03:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Clickteam [2009-12-22 13:31:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\DAEMON Tools Lite [2011-05-21 16:44:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\DisneyInteractiveStudios [2009-10-12 18:55:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\FlashGetBHO [2010-02-05 13:16:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\fltk.org [2009-10-03 21:41:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Gadu-Gadu [2010-03-28 19:01:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Gadu-Gadu 10 [2010-07-07 15:51:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\GBM Software [2010-01-30 23:43:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\GeoVid [2011-02-04 15:39:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\GetRightToGo [2010-12-04 12:55:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\gnupg [2011-05-26 23:10:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\gtk-2.0 [2011-05-02 13:25:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\ipla [2009-10-09 16:18:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\iZ3D Driver [2010-11-02 20:10:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Leadertech [2010-04-11 11:01:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\LogSys [2009-10-02 20:41:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Moyea [2010-10-10 19:12:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\profiles [2010-12-04 12:57:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\ProtectDISC [2009-12-30 22:01:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Publish Providers [2011-05-02 13:24:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\RDRM [2011-04-18 21:24:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Samsung [2009-12-30 22:00:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Sony [2010-04-13 20:36:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\TeamViewer [2011-06-17 14:43:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Toolbar4 [2010-11-10 20:15:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Ubisoft [2010-01-30 23:32:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Użytkownik\Dane aplikacji\VidMorph [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:05EE1EEF @Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:C8B8CEBD < End of report >

Extras:

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2011-07-03 12:27:06 - Run 6 OTL by OldTimer - Version 3.2.25.0 Folder = C:\Documents and Settings\Użytkownik\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,50 Gb Total Physical Memory | 2,68 Gb Available Physical Memory | 76,66% Memory free 7,34 Gb Paging File | 6,64 Gb Available in Paging File | 90,55% Paging File free Paging file location(s): [Binary data over 100 bytes] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 97,65 Gb Total Space | 14,69 Gb Free Space | 15,04% Space Free | Partition Type: NTFS Drive E: | 97,65 Gb Total Space | 74,33 Gb Free Space | 76,12% Space Free | Partition Type: NTFS Drive F: | 102,77 Gb Total Space | 51,48 Gb Free Space | 50,09% Space Free | Partition Type: NTFS Computer Name: W-4E1E25B952BE4 | User Name: Użytkownik | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* [HKEY_USERS\S-1-5-21-1482476501-682003330-1676017868-1003\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 "AntiSpywareOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 "26675:TCP" = 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 "139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002 "7565:TCP" = 7565:TCP:*:Enabled:BitComet 7565 TCP "7565:UDP" = 7565:UDP:*:Enabled:BitComet 7565 UDP "26675:TCP" = 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\AVG\AVG8\avgemc.exe" = C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe -- (AVG Technologies CZ, s.r.o.) "C:\Program Files\AVG\AVG8\avgupd.exe" = C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe -- (AVG Technologies CZ, s.r.o.) "C:\Program Files\Gadu-Gadu\gg.exe" = C:\Program Files\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program główny "$INSTDIR\FlvDetector.exe" = C:\Program Files\FlashGet Network\FlashGet 3\FlvDetector.exe:*:Enabled:FGFlvDetector "C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe" = C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3 "C:\Program Files\BitComet\BitComet.exe" = C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe "C:\Program Files\Java\jre6\bin\javaw.exe" = C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.) "C:\Program Files\Gadu-Gadu 10\gg.exe" = C:\Program Files\Gadu-Gadu 10\gg.exe:*:Enabled:Gadu-Gadu 10 -- (GG Network S.A.) "C:\Program Files\FlashGet\flashget.exe" = C:\Program Files\FlashGet\flashget.exe:*:Enabled:Flashget -- (FlashGet.com) "C:\Program Files\MAME32k\mame32kpp.exe" = C:\Program Files\MAME32k\mame32kpp.exe:*:Enabled:mame32kpp -- () "C:\P2P\mame32kpp.exe" = C:\P2P\mame32kpp.exe:*:Enabled:mame32kpp "C:\P2P\mame32k.exe" = C:\P2P\mame32k.exe:*:Enabled:mame32k "C:\Program Files\MAME32k\P2P\mame32kpp.exe" = C:\Program Files\MAME32k\P2P\mame32kpp.exe:*:Enabled:mame32kpp -- () "C:\Program Files\MAME32k\P2P\mame32k.exe" = C:\Program Files\MAME32k\P2P\mame32k.exe:*:Enabled:mame32k -- () "C:\Documents and Settings\Użytkownik\Moje dokumenty\Pobieranie\PES 10 FULL-RIP\PES 10 FULL-RIP\pes2010.exe" = C:\Documents and Settings\Użytkownik\Moje dokumenty\Pobieranie\PES 10 FULL-RIP\PES 10 FULL-RIP\pes2010.exe:*:Enabled:Pro Evolution Soccer 2010 "C:\Program Files\RealVNC\VNCTool\vnctool.exe" = C:\Program Files\RealVNC\VNCTool\vnctool.exe:*:Enabled:VNC Deployment Tool "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" = C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe:*:Enabled:LogMeIn Hamachi "C:\Documents and Settings\Użytkownik\Pulpit\remote\Remote Touch Server.exe" = C:\Documents and Settings\Użytkownik\Pulpit\remote\Remote Touch Server.exe:*:Enabled:Remote control your PC/laptop. "C:\Program Files\GBM\GRemote Pro\GRemoteServer.exe" = C:\Program Files\GBM\GRemote Pro\GRemoteServer.exe:*:Enabled:GRemoteServer Pro -- (GBM Software) "C:\Documents and Settings\Użytkownik\Pulpit\snes4\zsnesw.exe" = C:\Documents and Settings\Użytkownik\Pulpit\snes4\zsnesw.exe:*:Enabled:zsnesw "F:\Die by the Sword\windie.exe" = F:\Die by the Sword\windie.exe:*:Enabled:windie -- () "C:\WINDOWS\system32\dplaysvr.exe" = C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper -- (Microsoft Corporation) "C:\Program Files\Ubisoft\Assassin's Creed II\offlineserver-v0.32\server.exe" = C:\Program Files\Ubisoft\Assassin's Creed II\offlineserver-v0.32\server.exe:*:Enabled:server "C:\Program Files\Ubisoft\Assassin's Creed II\server.exe" = C:\Program Files\Ubisoft\Assassin's Creed II\server.exe:*:Enabled:server "C:\Program Files\Ubisoft\Splinter Cell Pandora Tomorrow\Pandora.exe" = C:\Program Files\Ubisoft\Splinter Cell Pandora Tomorrow\Pandora.exe:*:Enabled:Pandora -- () "C:\Program Files\Ubisoft\Splinter Cell Pandora Tomorrow\Online\System\Shadowstrike_static_retail.ex" = C:\Program Files\Ubisoft\Splinter Cell Pandora Tomorrow\Online\System\Shadowstrike_static_retail.ex:*:Enabled:Shadowstrike_static_retail -- () "C:\Fusion.exe" = C:\Fusion.exe:*:Enabled:Fusion "C:\Program Files\EA Sports\FIFA 11\Game\fifa.exe" = C:\Program Files\EA Sports\FIFA 11\Game\fifa.exe:*:Enabled:FIFA 11 "C:\Program Files\Electronic Arts\EADM\Core.exe" = C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager "F:\fifa11full\Game\fifa.exe" = F:\fifa11full\Game\fifa.exe:*:Enabled:FIFA 11 "C:\Program Files\EA Sports\FIFA 11 Demo\Game\fifa.exe" = C:\Program Files\EA Sports\FIFA 11 Demo\Game\fifa.exe:*:Enabled:FIFA 11 "C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Temp\Rar$EX00.140\zsnesw.exe" = C:\Documents and Settings\Użytkownik\Ustawienia lokalne\Temp\Rar$EX00.140\zsnesw.exe:*:Enabled:zsnesw "C:\Documents and Settings\Użytkownik\Moje dokumenty\Pobieranie\zsnesw142\zsnesw.exe" = C:\Documents and Settings\Użytkownik\Moje dokumenty\Pobieranie\zsnesw142\zsnesw.exe:*:Enabled:zsnesw "C:\Documents and Settings\Użytkownik\Moje dokumenty\Pobieranie\snes9x-1.51-win32\snes9x.exe" = C:\Documents and Settings\Użytkownik\Moje dokumenty\Pobieranie\snes9x-1.51-win32\snes9x.exe:*:Enabled:Snes9XW "C:\Program Files\Steam\Steam.exe" = C:\Program Files\Steam\Steam.exe:*:Enabled:Steam "F:\wii emulator\Win32\Dolphin.exe" = F:\wii emulator\Win32\Dolphin.exe:*:Enabled:Dolphin "C:\Documents and Settings\Użytkownik\Moje dokumenty\Pobieranie\EmuCR-Dolphin-r4758-x86\Dolphin.exe" = C:\Documents and Settings\Użytkownik\Moje dokumenty\Pobieranie\EmuCR-Dolphin-r4758-x86\Dolphin.exe:*:Enabled:Dolphin "C:\Documents and Settings\Użytkownik\Moje dokumenty\Pobieranie\vbalink180b0\VisualBoyAdvance.exe" = C:\Documents and Settings\Użytkownik\Moje dokumenty\Pobieranie\vbalink180b0\VisualBoyAdvance.exe:*:Enabled:VisualBoyAdvance emulator "C:\Program Files\Steam\steamapps\common\worms reloaded\WormsReloaded.exe" = C:\Program Files\Steam\steamapps\common\worms reloaded\WormsReloaded.exe:*:Enabled:Worms Reloaded "C:\WINDOWS\system32\muzapp.exe" = C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player -- (Musiccity Co.Ltd.) "C:\Program Files\WinPcap\rpcapd.exe" = C:\Program Files\WinPcap\rpcapd.exe:*:Enabled:Remote Packet Capture Daemon "C:\Program Files\AVG\AVG10\avgmfapx.exe" = C:\Program Files\AVG\AVG10\avgmfapx.exe:*:Enabled:Instalator AVG -- (AVG Technologies CZ, s.r.o.) "E:\Program Files\Wiedźmin 2\bin\witcher2.exe" = E:\Program Files\Wiedźmin 2\bin\witcher2.exe:*:Enabled:The Witcher 2: Assasins of Kings -- () "C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe" = C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe -- (NVIDIA Corporation) "C:\Program Files\AVG\AVG10\avgdiagex.exe" = C:\Program Files\AVG\AVG10\avgdiagex.exe:*:Enabled:Diagnostyka AVG 2011 -- (AVG Technologies CZ, s.r.o.) "C:\Program Files\AVG\AVG10\avgnsx.exe" = C:\Program Files\AVG\AVG10\avgnsx.exe:*:Enabled:Ochrona Sieci -- (AVG Technologies CZ, s.r.o.) "C:\Program Files\AVG\AVG10\avgemcx.exe" = C:\Program Files\AVG\AVG10\avgemcx.exe:*:Enabled:Uniwersalny skaner poczty e-mail -- (AVG Technologies CZ, s.r.o.) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{036FD544-AED6-3F33-856D-A2292D0CF471}" = Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - PLK "{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 "{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}" = YouTube Downloader 2.7.2 "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{228814B2-6A64-4AD5-8D2D-4E2188DEB191}" = AVG 2011 "{4310F91F-7510-4E8C-82E3-B81BA4EE0991}" = Tom Clancy's Splinter Cell: Pandora Tomorrow "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{5BCC634A-58AD-42F9-B3C6-2EA52F81CF85}" = Snagit 10 "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies "{7C77393F-8237-3825-A88A-AFAF3C69C072}" = Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - PLK "{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{90120000-0020-0415-0000-0000000FF1CE}" = Pakiet zgodności dla systemu Office 2007 "{99052DB7-9592-4522-A558-5417BBAD48EE}" = Microsoft ActiveSync "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A9111573-EF12-4D80-A5B9-55F620D5BCA1}" = PL-2303 USB-to-Serial "{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 270.61 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 270.61 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView" = NVIDIA nView 135.70 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.10.0514 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 1.1.34 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components "{B93DCF58-AA57-41EC-8D69-B05C66C6312D}_is1" = v2011.build.45 "{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones "{DB90FF25-9932-48F2-B643-1802F1864FAF}" = AVG 2011 "{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 "{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}" = PL-2303 USB-to-Serial "{EFB21DE7-8C19-4A88-BB28-A766E16493BC}" = Adobe Photoshop CS "{F0A209B7-7F85-4BDD-8F1F-B98EEAD9E04B}" = Wiedźmin 2 "{F31E509D-3597-324E-83CF-0C160B2320F0}" = Microsoft .NET Framework 3.5 Language Pack - plk "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "AVG" = AVG 2011 "AVI Joiner_is1" = AVI Joiner version 1.22 "AVI ReComp" = AVI ReComp 1.5.1 "Avisynth" = AviSynth 2.5 "Cheat Engine 5.5_is1" = Cheat Engine 5.5 "Die by the Sword" = Die by the Sword "DVDStyler_is1" = DVDStyler v1.8.3 "FinePrint" = FinePrint "FMCODEC" = FM Screen Capture Codec (Remove Only) "Fraps" = Fraps (remove only) "Gadu-Gadu 10" = Gadu-Gadu 10 "Gothic 3 - Quest Pack 4 PL" = Gothic 3 - Quest Pack 4 PL "GRemoteServer" = GRemoteServer Pro(remove only) "InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies "ipla" = ipla 2.2.1 "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Microsoft .NET Framework 3.5 Language Pack - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 — PLK "Multimedia Fusion 2" = Multimedia Fusion 2 "NAVIGON Fresh" = NAVIGON Fresh 3.3.1 "NVIDIA Drivers" = NVIDIA Drivers "NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager "pcsx2-r3878" = PCSX2 - Playstation 2 Emulator "ScreenVirtuoso PRO_is1" = ScreenVirtuoso PRO 4.15 Tryout "Tekken 3 Online_is1" = TK3Online v1 with ePSXe 1.5.2 "Total Video Converter 3.10_is1" = Total Video Converter 3.10 "Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 "Windows Media Format Runtime" = Windows Media Format 11 runtime "WinRAR archiver" = WinRAR archiver "WMFDist11" = Windows Media Format 11 runtime "Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0 "XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0 "Xvid_is1" = Xvid 1.2.2 [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-1482476501-682003330-1676017868-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Mozilla Firefox (3.6.18)" = Mozilla Firefox (3.6.18) [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 2011-07-01 16:19:50 | Computer Name = W-4E1E25B952BE4 | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca Launcher.exe, wersja 0.9.0.754, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2011-07-01 16:21:03 | Computer Name = W-4E1E25B952BE4 | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca witcher2.exe, wersja 1.2.6276.44681, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. [ System Events ] Error - 2011-06-29 14:50:09 | Computer Name = W-4E1E25B952BE4 | Source = Service Control Manager | ID = 7001 Description = Usługa Klient DNS zależy od usługi Sterownik protokołu TCP/IP, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2011-06-29 14:50:09 | Computer Name = W-4E1E25B952BE4 | Source = Service Control Manager | ID = 7001 Description = Usługa Pomoc TCP/IP NetBIOS zależy od usługi AFD, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2011-06-29 14:50:09 | Computer Name = W-4E1E25B952BE4 | Source = Service Control Manager | ID = 7001 Description = Usługa Usługi IPSEC zależy od usługi Sterownik IPSEC, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2011-06-29 14:50:09 | Computer Name = W-4E1E25B952BE4 | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: AFD AmdK8 Avgldx86 Avgmfx86 Avgtdix Fips IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss sptd Tcpip Error - 2011-07-02 11:27:59 | Computer Name = W-4E1E25B952BE4 | Source = sptd | ID = 262148 Description = Sterownik wykrył błąd wewnętrzny w swoich strukturach danych dla . Error - 2011-07-02 11:28:07 | Computer Name = W-4E1E25B952BE4 | Source = nvgts | ID = 262153 Description = Urządzenie \Device\Scsi\nvgts1 nie odpowiedziało w ramach ustalonego limitu czasu. Error - 2011-07-02 11:28:07 | Computer Name = W-4E1E25B952BE4 | Source = nvgts | ID = 262149 Description = Na \Device\Scsi\nvgts1 został wykryty błąd parzystości. Error - 2011-07-02 11:29:55 | Computer Name = W-4E1E25B952BE4 | Source = System Error | ID = 1003 Description = Kod błędu 1000008e, parametr 1 c0000005, parametr 2 805512e0, parametr 3 b7c50af8, parametr 4 00000000. Error - 2011-07-03 06:24:08 | Computer Name = W-4E1E25B952BE4 | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi atksgt z powodu następującego błędu: %%2 Error - 2011-07-03 06:24:08 | Computer Name = W-4E1E25B952BE4 | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi lirsgt z powodu następującego błędu: %%2 < End of report >

Poprzednio po prostu zapomniałem wrzucić log z Extras. Wydaje mi się, że zaznaczyłem wszystko jak na rysunku - rejestr skan dodatkowy -> użyj filtrowania jest zaznaczone.

**Posty:** 18165 · przez **wojtas** 03 Lip 2011, 23:06

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
FF - prefs.js..browser.search.defaultthis.engineName: "free-downloads.net Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1098640&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.selectedEngine: "free-downloads.net Customized Web Search"
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1098640&q="
[2011-06-19 12:25:23 | 000,000,000 | ---D | M] (free-downloads.net Toolbar) -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\v9964hli.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}
[2010-01-20 12:16:28 | 000,000,939 | ---- | M] () -- C:\Documents and Settings\Użytkownik\Dane aplikacji\Mozilla\Firefox\Profiles\v9964hli.default\searchplugins\conduit.xml
[2011-06-19 12:25:25 | 000,000,000 | ---D | C] -- C:\Program Files\Conduit

:Commands
[emptytemp]
[emptyflash]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

*Uruchom OTL z opcji sprzątanie.
* wykonaj optymalizację Windowsa ( instrukcja dla Windowsa XP, lecz w innych systemach jest podobnie )
* zrób pełny skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie )
* Skasuj stan przywracania systemu

Zaktualizuj zabezpieczenia:
>>> Java™ 6
>>> Mozilla Firefox 5.0

napisz jak sytuacja z komputerem

**Posty:** 448 · przez **kamiledi15** 20 Sie 2011, 00:32

Zrobiłem wszystko, co napisałeś. Malwarebytes nie znalazł ŻADNYCH zagrożeń. System ,,zoptymalizowany", punkty przywracania usunięte, komputer ,,odkurzony", OTL zrobiony z opcji ,,sprzątanie" i właściwie nic się nie zmieniło - nadal przy każdym uruchomieniu Firefoxa mam ten komunikat w rogu ekranu. Raz na dwa dni komputer zawiesza się w losowym momencie, zwykle wtedy, gdy otwieram kilka kart z filmami z Youtube. Dużo rzadziej, ale też się zdarza zawieszenie przy otwarciu filmu z innej strony, np Dailymotion, mniej więcej raz na tydzień wystarczy, że otworzę tylko jeden film na Youtube i mam zawieszenie. Zawieszanie objawia się tym, że obraz na filmie nieruchomieje, leci sam dźwięk, a ja mogę ruszać kursorem, ale nie mogę niczego wcisnąć. Po dwóch minutach takiego stanu niebieski ekran i automatyczny reset komputera, a potem ,,system odzyskał sprawność po poważnym błędzie". Co ciekawe, ten komunikat jest tylko przy otwieraniu Firefoxa, przy używaniu Internet Explorera go nie ma. Zdecydowanie wolę jednak Firefoxa i wolę jego używać. Nie wiem, jak jest z zawieszaniem w IE, bo nie działają mi tam filmy na Youtube, czy Dailymotion - woła o Adobe Flash Playera, mimo, że jest zainstalowany.
Czyli podsumowując - przy otwieraniu Firefoxa mam denerwujący komunikat z AVG, do tego losowe zawieszenia przy otwieraniu filmów z Youtube - piszę losowe, bo to jest loteria, ten sam film czasami się otworzy, a czasami się zawiesi. Skanowania w różnych podanych przez ciebie programach i samym AVG niczego nie znajdują, według nich wszystko jest w porządku, a mimo to problem nie znika. Oprócz wymienionych problemów komputer działa szybko i sprawnie, ale te problemy są bardzo denerwujące, bo czasami uda się obejrzeć 10 filmów bez problemu, a czasami zawiesi się kilka razy pod rząd i trzeba resetować co kilka minut. Zawieszenia następują na samym początku filmu, jeśli nie zawiesi się w ciągu pierwszych paru sekund, to dalej już idzie dobrze. Zauważyłem, że im więcej mam otwartych kart w Firefoxie, tym większe ryzyko zawieszenia. Dlatego teraz przy każdym otwarciu Youtube zastanawiam się: ,,zawiesi się tym razem, czy nie?".
Co do aktualizacji zabezpieczeń Firefoxa - nie mogłem na tej stronie, którą podałeś, znaleźć, jak to zrobić. Firefox aktualizuje się sam co jakiś czas i nie wiem, czy aktualizują się też te zabezpieczenia. Może najprostszym rozwiązaniem byłaby zmiana przeglądarki, ale boję się zostawiać jakiś syf na dysku, bo kto wie, czy powoli nie zacznie stwarzać większych problemów, lepiej się go pewnie pozbyć, zanim się rozwinie. Co ciekawe nie mogę znaleźć tego pliku cookies.sqlite, który jest wymieniony w tym komunikacie, ani nawet folderu, w którym podobno się znajduje. Nie pisałem wcześniej o tych zawieszeniach, bo mam wrażenie, że ostatnio się nasiliły i teraz są częstsze, a wtedy zdarzało się to dość rzadko.

**Posty:** 18165 · przez **wojtas** 21 Sie 2011, 20:03

poczytaj:

sposob-na-problemy-z-firefoxem-vt79402.html

Kto jest na forum