Zamulony komputer

**Posty:** 584 · przez **Piotrek1993** 25 Wrz 2009, 18:53

Witam.

Jakoś tak od kilku dni mój komputer wyraźnie zwolnił :evil:

Tydzień temu włączał się około 1-2 minut (może nawet krócej), a dzisiaj - 5-6 minut. Jakieś aplikacje również włączają się dłużej. Ogólnie jakoś tak wszystko włącza się dłużej i już nie ma do tego cierpliwości sciana

Kod: Zaznacz wszystko: OTL logfile created on: 2009-09-25 18:21:34 - Run 1 OTL by OldTimer - Version 3.0.14.0 Folder = C:\Documents and Settings\PC\Pulpit Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 100,00% Memory free 4,00 Gb Paging File | 4,00 Gb Available in Paging File | 100,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 79,63 Gb Total Space | 22,63 Gb Free Space | 28,42% Space Free | Partition Type: NTFS D: Drive not present or media not loaded Drive E: | 292,97 Gb Total Space | 123,28 Gb Free Space | 42,08% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: PC-C24C7C90B85B Current User Name: PC Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2009-07-02 19:04:08 | 00,602,112 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe PRC - [2009-07-02 19:04:08 | 00,602,112 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe PRC - [2009-08-17 17:58:55 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe PRC - [2009-08-17 18:07:17 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe PRC - [2008-04-15 14:00:00 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2008-06-13 08:50:30 | 16,871,936 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTHDCPL.EXE PRC - [2009-08-17 18:07:23 | 00,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe PRC - [2009-03-09 05:19:17 | 00,148,888 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe PRC - [2008-04-13 14:39:20 | 00,049,152 | ---- | M] (artArmin) -- C:\Program Files\Vista Drive Icon\DrvIcon.exe PRC - [2008-12-29 12:40:30 | 00,687,560 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\daemon.exe PRC - [2009-08-31 16:23:07 | 01,217,784 | ---- | M] (Valve Corporation) -- E:\GRY\Steam\Steam.exe PRC - [2009-04-22 17:38:50 | 00,065,536 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe PRC - [2009-04-22 17:37:16 | 00,065,536 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe PRC - [2006-01-21 13:41:56 | 00,118,784 | ---- | M] () -- C:\Program Files\Rainmeter\Rainmeter.exe PRC - [2007-04-30 19:43:54 | 03,450,608 | ---- | M] (Stardock) -- C:\Program Files\Stardock\ObjectDock\ObjectDock.exe PRC - [2008-09-03 17:54:14 | 03,690,496 | ---- | M] (Axesstel Inc.) -- C:\Program Files\Axesstel\AxessManager\AxessManager.exe PRC - [2007-12-06 21:03:41 | 00,660,768 | ---- | M] (ABBYY (BIT Software)) -- C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe PRC - [2009-03-09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe PRC - [2008-07-11 02:28:06 | 40,999,448 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe PRC - [2009-08-19 21:08:04 | 00,075,064 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrA.exe PRC - [2009-08-17 18:07:01 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe PRC - [2009-08-17 18:04:21 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe PRC - [2008-07-29 21:10:04 | 00,046,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe PRC - [2009-09-25 18:00:37 | 00,189,104 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.exe PRC - [2008-11-12 16:10:46 | 00,846,336 | ---- | M] () -- C:\Documents and Settings\PC\Ustawienia lokalne\temp\Rar$EX00.422\pbsetup.exe PRC - [2009-09-11 23:04:15 | 00,307,704 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-09-25 18:20:05 | 00,514,560 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\PC\Pulpit\OTL.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2007-12-06 21:03:41 | 00,660,768 | ---- | M] (ABBYY (BIT Software)) -- C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.9.0 [Auto | Running]) SRV - [2008-07-25 11:16:40 | 00,034,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped]) SRV - [2009-08-17 17:58:55 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv [Auto | Running]) SRV - [2009-07-02 19:04:08 | 00,602,112 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe -- (Ati HotKey Poller [Auto | Running]) SRV - [2009-07-02 12:12:00 | 00,593,920 | ---- | M] () -- C:\WINDOWS\System32\ati2sgag.exe -- (ATI Smart [Auto | Stopped]) SRV - [2009-08-17 18:07:17 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus [Auto | Running]) SRV - [2009-08-17 18:07:01 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner [On_Demand | Running]) SRV - [2009-08-17 18:04:21 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner [On_Demand | Running]) SRV - [2008-07-25 11:17:02 | 00,069,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) SRV - [2008-07-29 21:10:04 | 00,046,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Running]) SRV - [2008-04-15 14:00:00 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running]) SRV - [2005-04-04 00:41:10 | 00,069,632 | ---- | M] (Macrovision Corporation) -- C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT [On_Demand | Stopped]) SRV - [2008-07-29 19:24:50 | 00,881,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [Unknown | Stopped]) SRV - [2009-03-09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running]) SRV - [2008-07-11 02:28:06 | 40,999,448 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe -- (MSSQL$SQLEXPRESS [Auto | Running]) SRV - [2008-07-11 02:28:04 | 00,047,128 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE -- (MSSQLServerADHelper100 [Disabled | Stopped]) SRV - File not found -- -- (Nero BackItUp Scheduler 4.0 [Auto | Stopped]) SRV - [2008-07-29 19:16:38 | 00,132,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped]) SRV - [2007-08-24 03:19:12 | 00,443,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv [On_Demand | Stopped]) SRV - [2006-10-26 14:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped]) SRV - [2009-08-19 21:08:04 | 00,075,064 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrA.exe -- (PnkBstrA [Auto | Running]) SRV - [2008-07-11 02:28:06 | 00,369,688 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE -- (SQLAgent$SQLEXPRESS [Disabled | Stopped]) SRV - [2006-12-01 11:46:28 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped]) SRV - [2009-09-25 18:00:37 | 00,189,104 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.exe -- (PnkBstrB [Auto | Running]) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2009-08-17 18:03:21 | 00,026,944 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4 [System | Running]) DRV - [2007-12-17 11:14:06 | 00,012,400 | R--- | M] () -- C:\WINDOWS\System32\drivers\AsIO.sys -- (AsIO [System | Running]) DRV - [2009-08-17 18:05:37 | 00,020,560 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\DRIVERS\aswFsBlk.sys -- (aswFsBlk [Auto | Running]) DRV - [2009-08-17 18:06:43 | 00,094,160 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2 [Auto | Running]) DRV - [2009-08-17 18:04:29 | 00,023,152 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr [On_Demand | Running]) DRV - [2009-08-17 18:05:52 | 00,114,768 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP [System | Running]) DRV - [2009-08-17 18:04:40 | 00,051,376 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi [System | Running]) DRV - [2009-07-02 19:49:32 | 04,125,696 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\DRIVERS\ati2mtag.sys -- (ati2mtag [On_Demand | Running]) DRV - [2008-05-21 01:53:36 | 00,093,696 | R--- | M] (ATI Research Inc.) -- C:\WINDOWS\System32\drivers\AtiHdmi.sys -- (AtiHdmiService [On_Demand | Running]) DRV - [2009-07-13 13:01:14 | 00,281,760 | ---- | M] () -- C:\WINDOWS\System32\DRIVERS\atksgt.sys -- (atksgt [Auto | Running]) DRV - [2009-02-25 06:33:58 | 00,003,456 | R--- | M] (Axesstel) -- C:\WINDOWS\System32\DRIVERS\Axtmvflt.sys -- (Axtmvflt [On_Demand | Stopped]) DRV - [2009-02-25 06:34:12 | 00,040,064 | R--- | M] (Axesstel) -- C:\WINDOWS\System32\DRIVERS\Axtmvmdm.sys -- (Axtmvmdm [On_Demand | Stopped]) DRV - [2009-02-25 06:34:23 | 00,038,784 | R--- | M] (Axesstel) -- C:\WINDOWS\System32\Drivers\Axtmvprt.sys -- (Axtmvprt [On_Demand | Stopped]) DRV - [2005-05-31 15:40:20 | 00,020,480 | ---- | M] (IVT Corporation) -- C:\WINDOWS\System32\DRIVERS\blueletaudio.sys -- (BlueletAudio [On_Demand | Stopped]) DRV - [2005-04-30 14:48:58 | 00,010,804 | ---- | M] (IVT Corporation) -- C:\WINDOWS\System32\DRIVERS\btnetdrv.sys -- (BT [On_Demand | Stopped]) DRV - [2005-05-31 09:42:28 | 00,023,000 | ---- | M] (IVT Corporation) -- C:\WINDOWS\System32\Drivers\btcusb.sys -- (Btcsrusb [On_Demand | Stopped]) DRV - [2005-04-30 14:50:20 | 00,011,860 | ---- | M] () -- C:\WINDOWS\System32\DRIVERS\vbtenum.sys -- (BTHidEnum [On_Demand | Stopped]) DRV - [2005-04-30 14:50:10 | 00,028,271 | ---- | M] (IVT Corporation) -- C:\WINDOWS\System32\Drivers\BTHidMgr.sys -- (BTHidMgr [Boot | Running]) DRV - [2008-09-17 16:14:00 | 00,027,672 | R--- | M] (EnTech Taiwan) -- C:\WINDOWS\System32\DRIVERS\ENTECH.sys -- (ENTECH [On_Demand | Stopped]) DRV - [2009-08-02 10:48:59 | 00,025,280 | ---- | M] (LogMeIn, Inc.) -- C:\WINDOWS\System32\DRIVERS\hamachi.sys -- (hamachi [On_Demand | Running]) DRV - [2008-04-15 14:00:00 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\System32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running]) DRV - [2008-06-13 11:11:16 | 04,754,944 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys -- (IntcAzAudAddService [On_Demand | Running]) DRV - [2008-06-25 18:47:00 | 00,036,864 | R--- | M] (Atheros Communications, Inc.) -- C:\WINDOWS\System32\DRIVERS\l1e51x86.sys -- (L1e [On_Demand | Running]) DRV - [2009-07-13 13:01:14 | 00,025,888 | ---- | M] () -- C:\WINDOWS\System32\DRIVERS\lirsgt.sys -- (lirsgt [Auto | Running]) DRV - [2004-08-13 04:56:20 | 00,005,810 | R--- | M] () -- C:\WINDOWS\System32\DRIVERS\ASACPI.sys -- (MTsensor [On_Demand | Running]) DRV - [2008-04-15 14:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) DRV - [2007-03-08 01:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running]) DRV - [2008-07-10 02:49:14 | 00,242,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\RsFx0102.sys -- (RsFx0102 [Disabled | Stopped]) DRV - [2007-12-10 15:22:14 | 00,083,880 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\System32\DRIVERS\s3017bus.sys -- (s3017bus [On_Demand | Stopped]) DRV - [2007-12-10 15:22:18 | 00,015,016 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\System32\DRIVERS\s3017mdfl.sys -- (s3017mdfl [On_Demand | Stopped]) DRV - [2007-12-10 15:22:18 | 00,110,632 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\System32\DRIVERS\s3017mdm.sys -- (s3017mdm [On_Demand | Stopped]) DRV - [2007-12-10 15:22:20 | 00,104,616 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\System32\DRIVERS\s3017mgmt.sys -- (s3017mgmt [On_Demand | Stopped]) DRV - [2007-12-10 15:22:20 | 00,025,512 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\System32\DRIVERS\s3017nd5.sys -- (s3017nd5 [On_Demand | Stopped]) DRV - [2007-12-10 15:22:22 | 00,100,648 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\System32\DRIVERS\s3017obex.sys -- (s3017obex [On_Demand | Stopped]) DRV - [2007-12-10 15:22:22 | 00,110,120 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\System32\DRIVERS\s3017unic.sys -- (s3017unic [On_Demand | Stopped]) DRV - [2008-04-15 14:00:00 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped]) DRV - [2009-02-01 21:17:15 | 00,717,296 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running]) DRV - [2004-10-19 13:37:38 | 00,061,312 | ---- | M] (IVT Corporation) -- C:\WINDOWS\System32\DRIVERS\VComm.sys -- (VComm [On_Demand | Running]) DRV - [2005-03-25 17:18:48 | 00,082,148 | ---- | M] (IVT Corporation) -- C:\WINDOWS\System32\Drivers\VcommMgr.sys -- (VcommMgr [On_Demand | Running]) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1123561945-1644491937-682003330-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKU\S-1-5-21-1123561945-1644491937-682003330-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKU\S-1-5-21-1123561945-1644491937-682003330-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ IE - URLSearchHook: {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Dealio Toolbar\SearchSettings.dll (Spigot, Inc.) IE - HKU\S-1-5-21-1123561945-1644491937-682003330-1004\S-1-5-21-1123561945-1644491937-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Yahoo" FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=894204" FF - prefs.js..browser.search.selectedEngine: "Wikipedia (pl)" FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledItems: {6E19037A-12E3-4295-8915-ED48BC341614}:1.3 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1 FF - prefs.js..extensions.enabledItems: {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}:4.0.1 FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20080609.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}:6.0.12 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {49f3fc85-dcfe-4e42-9301-226ebe658509}:0.6.3 FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.1 FF - prefs.js..extensions.enabledItems: search@searchsettings.com:1.2.2 FF - prefs.js..extensions.enabledItems: mozilla_cc@internetdownloadmanager.com:6.7 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.14 FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=894204&p=" FF - HKLM\software\mozilla\Firefox\extensions\\{6E19037A-12E3-4295-8915-ED48BC341614}: C:\Program Files\PermissionResearch [2009-04-02 13:17:12 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2009-03-02 16:34:13 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009-06-24 20:48:17 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.14\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009-09-11 23:04:19 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.14\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-09-11 23:04:19 | 00,000,000 | ---D | M] [2008-12-19 19:30:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\PC\Dane aplikacji\mozilla\Extensions [2008-12-19 19:30:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\PC\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2009-09-24 21:25:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\PC\Dane aplikacji\mozilla\Firefox\Profiles\93pl7xph.default\extensions [2009-06-25 12:06:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\PC\Dane aplikacji\mozilla\Firefox\Profiles\93pl7xph.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2009-03-06 21:54:45 | 00,000,000 | ---D | M] -- C:\Documents and Settings\PC\Dane aplikacji\mozilla\Firefox\Profiles\93pl7xph.default\extensions\{49f3fc85-dcfe-4e42-9301-226ebe658509} [2009-07-14 11:29:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\PC\Dane aplikacji\mozilla\Firefox\Profiles\93pl7xph.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2009-01-27 16:26:49 | 00,000,000 | ---D | M] -- C:\Documents and Settings\PC\Dane aplikacji\mozilla\Firefox\Profiles\93pl7xph.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2009-09-24 21:25:02 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions [2009-08-14 20:01:09 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} [2009-09-11 23:04:14 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2009-03-02 16:34:20 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} [2009-04-01 17:13:38 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} [2009-08-14 20:01:09 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\search@searchsettings.com [2009-09-11 23:04:14 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll [2009-09-11 23:04:14 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll [2007-04-10 17:21:08 | 00,163,256 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2009-03-09 05:19:09 | 00,410,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeploytk.dll [2009-09-11 23:04:16 | 00,065,528 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll [2009-01-28 21:46:54 | 00,307,200 | ---- | M] (ESKA) -- C:\Program Files\mozilla firefox\plugins\npOggX.dll [2009-02-27 12:13:42 | 00,103,792 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2009-02-03 13:15:26 | 00,144,960 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2009-02-03 13:15:30 | 00,008,192 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nprjplug.dll [2009-02-03 13:15:24 | 00,094,208 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nprpjplug.dll [2007-03-10 01:16:44 | 00,189,496 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\mozilla firefox\plugins\npyaxmpb.dll [2009-07-23 22:11:17 | 00,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2009-04-24 19:10:11 | 00,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2009-04-24 19:10:11 | 00,001,706 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml [2009-04-24 19:10:11 | 00,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2009-04-24 19:10:11 | 00,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2009-04-24 19:10:11 | 00,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2009-04-24 19:10:11 | 00,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: (27 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Tonec Inc.) O2 - BHO: (Dealio Toolbar) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll (Spigot, Inc.) O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Dealio Toolbar\SearchSettings.dll (Spigot, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O3 - HKLM\..\Toolbar: (Dealio Toolbar) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll (Spigot, Inc.) O3 - HKLM\..\Toolbar: (&Tłumaczenie) - {0D704FAD-66E9-4F0A-BFED-4F665770DDB3} - C:\Program Files\Techland\Common\InternetTranslator\InternetTranslator.dll (Techland) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [ASUS UpdateChecker] C:\Program Files\ASUS\UpdateChecker\UpdateChecker.exe () O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software) O4 - HKLM..\Run: [DrvIcon] C:\Program Files\Vista Drive Icon\DrvIcon.exe (artArmin) O4 - HKLM..\Run: [KernelFaultCheck] File not found O4 - HKLM..\Run: [RTHDCPL] C:\WINDOWS\RTHDCPL.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SearchSettings] C:\Program Files\Dealio Toolbar\SearchSettings.exe (Spigot, Inc.) O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [TkBellExe] File not found O4 - HKU\S-1-5-21-1123561945-1644491937-682003330-1004..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd) O4 - HKU\S-1-5-21-1123561945-1644491937-682003330-1004..\Run: [Odkurzacz-MCD] C:\Program Files\Odkurzacz\odk_mcd.exe (Franmo Software) O4 - HKU\S-1-5-21-1123561945-1644491937-682003330-1004..\Run: [Real Desktop] C:\Program Files\Real Desktop\Real Desktop.exe File not found O4 - HKU\S-1-5-21-1123561945-1644491937-682003330-1004..\Run: [RGSC] E:\Rockstar Games Social Club\RGSCLauncher.exe (Take-Two Interactive Software, Inc.) O4 - HKU\S-1-5-21-1123561945-1644491937-682003330-1004..\Run: [Steam] E:\GRY\Steam\Steam.exe (Valve Corporation) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BlueSoleil.lnk = C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe File not found O4 - Startup: C:\Documents and Settings\PC\Menu Start\Programy\Autostart\Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe () O4 - Startup: C:\Documents and Settings\PC\Menu Start\Programy\Autostart\Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe (Stardock) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1123561945-1644491937-682003330-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1123561945-1644491937-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-1123561945-1644491937-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-1123561945-1644491937-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-21-1123561945-1644491937-682003330-1004_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Ściągnij przez IDM - C:\Program Files\Internet Download Manager\IEExt.htm () O8 - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm () O8 - Extra context menu item: Ściągnij zawartość wideo FLV przez IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm () O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Program Files\Techland\Common\InternetTranslator\InternetTranslator.dll,-103 - {B46B0919-62BA-4D99-A5C4-916B57A6805C} - C:\Program Files\Techland\Common\InternetTranslator\InternetTranslator.dll (Techland) O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} http://www.eset.eu/buxus/docs/OnlineScanner.cab (OnlineScanner Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13) O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\Ati2evxx.dll (ATI Technologies Inc.) O21 - SSODL: IconPackager Repair - {1799460C-0BC8-4865-B9DF-4A36CD703FF0} - C:\Program Files\Stardock\Object Desktop\IconPackager\iprepair.dll (Stardock.net, Inc) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008-12-19 18:41:38 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{22bfe8a6-d64c-11dd-a7b3-002215ed77a0}\Shell\AutoRun\command - "" = \Firefox\FirefoxPortable.exe O33 - MountPoints2\{71cf7a91-9601-11de-a936-002215ed77a0}\Shell - "" = AutoRun O33 - MountPoints2\{71cf7a91-9601-11de-a936-002215ed77a0}\Shell\AutoRun\command - "" = H:\Install.exe -- File not found O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - File not found [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] File not found -- C:\Documents and Settings\PC\Moje dokumenty\PC. [2009-09-25 18:18:51 | 00,514,560 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\PC\Pulpit\OTL.exe [2009-09-19 21:24:52 | 00,327,476 | ---- | C] () -- C:\Documents and Settings\PC\Moje dokumenty\pulpit.JPG [2009-09-19 16:08:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\PC\Moje dokumenty\Downloads [2009-09-19 16:08:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\PC\Dane aplikacji\IDM [2009-09-19 16:08:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\PC\Dane aplikacji\DMCache [2009-09-19 16:08:08 | 00,000,000 | ---D | C] -- C:\Program Files\Internet Download Manager [2009-09-18 18:48:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\PC\Moje dokumenty\NFS SHIFT [2009-09-18 18:41:21 | 00,001,623 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Need for Speed™ SHIFT.lnk [2009-09-16 14:26:27 | 00,210,352 | ---- | C] (Tonec Inc.) -- C:\WINDOWS\System32\idmmbc.dll [2009-09-11 23:14:54 | 00,000,118 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI [2009-09-11 02:00:34 | 00,041,872 | ---- | C] () -- C:\WINDOWS\System32\xfcodec.dll [2009-08-31 10:21:55 | 00,086,016 | R--- | C] (Socket Communications Inc.) -- C:\WINDOWS\System32\drivers\SCBaud.w9x [2009-08-31 10:21:55 | 00,077,824 | R--- | C] (Socket Communications Inc.) -- C:\WINDOWS\System32\drivers\SioUi2k.dll [2009-08-31 10:21:55 | 00,073,728 | R--- | C] (Socket Communications Inc.) -- C:\WINDOWS\System32\drivers\SCBaud.cpl [2009-08-31 10:21:55 | 00,063,488 | R--- | C] (National Semiconductor Sweden AB) -- C:\WINDOWS\System32\drivers\wssbtr1f.sys [2009-08-31 10:21:55 | 00,051,169 | R--- | C] (OEM) -- C:\WINDOWS\System32\drivers\OXSER.SYS [2009-08-31 10:21:55 | 00,048,556 | R--- | C] (Socket Communications, Inc. ) -- C:\WINDOWS\System32\drivers\SktBt2k.sys [2009-08-31 10:21:55 | 00,048,076 | R--- | C] (Socket Communications, Inc. ) -- C:\WINDOWS\System32\drivers\Sio9502k.sys [2009-08-31 10:21:55 | 00,040,960 | R--- | C] (Socket Communications Inc.) -- C:\WINDOWS\System32\drivers\SCTray.exe [2009-08-31 10:21:55 | 00,016,486 | R--- | C] () -- C:\WINDOWS\System32\drivers\sktsio9x.vxd [2009-08-31 10:21:55 | 00,014,380 | R--- | C] () -- C:\WINDOWS\System32\drivers\OXSER.VXD [2009-08-31 10:21:55 | 00,005,787 | R--- | C] () -- C:\WINDOWS\System32\drivers\SCTB.VXD [2009-08-31 10:21:55 | 00,000,208 | R--- | C] () -- C:\WINDOWS\System32\drivers\vssver.scc [2009-08-31 10:21:28 | 00,148,830 | ---- | C] (Broadcom Corporation) -- C:\WINDOWS\System32\drivers\bcbthub.sys [2009-08-31 10:21:28 | 00,116,021 | ---- | C] (Broadcom) -- C:\WINDOWS\System32\drivers\fw203x.sys [2009-08-31 10:21:28 | 00,082,148 | ---- | C] (IVT Corporation) -- C:\WINDOWS\System32\drivers\VcommMgr.sys [2009-08-31 10:21:28 | 00,061,312 | ---- | C] (IVT Corporation) -- C:\WINDOWS\System32\drivers\VComm.sys [2009-08-31 10:21:28 | 00,028,271 | ---- | C] (IVT Corporation) -- C:\WINDOWS\System32\drivers\BTHidMgr.sys [2009-08-31 10:21:28 | 00,023,000 | ---- | C] (IVT Corporation) -- C:\WINDOWS\System32\drivers\btcusb.sys [2009-08-31 10:21:28 | 00,020,480 | ---- | C] (IVT Corporation) -- C:\WINDOWS\System32\drivers\blueletaudio.sys [2009-08-31 10:21:28 | 00,013,304 | ---- | C] () -- C:\WINDOWS\System32\drivers\BTNetFilter.sys [2009-08-31 10:21:28 | 00,011,860 | ---- | C] () -- C:\WINDOWS\System32\drivers\vbtenum.sys [2009-08-31 10:21:28 | 00,011,736 | ---- | C] (IVT Corporation) -- C:\WINDOWS\System32\drivers\VHIDMini.sys [2009-08-31 10:21:28 | 00,010,804 | ---- | C] (IVT Corporation) -- C:\WINDOWS\System32\drivers\BtNetDrv.sys [2009-08-31 10:21:28 | 00,007,680 | ---- | C] (IVT Corporation) -- C:\WINDOWS\System32\btinstall.dll [2009-08-31 10:21:28 | 00,001,593 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BlueSoleil.lnk [2009-08-31 10:01:51 | 00,000,000 | ---D | C] -- C:\Documents and Settings\PC\Moje dokumenty\Bluetooth [2009-08-31 09:46:06 | 00,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\vfwwdm32.dll [2009-08-30 15:15:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\PC\Moje dokumenty\Poradniki - FP.pl [2009-08-28 10:02:40 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files [2009-08-27 16:34:01 | 00,000,662 | ---- | C] () -- C:\Documents and Settings\PC\Pulpit\Empire Total War.lnk [2009-08-27 10:44:40 | 00,000,000 | ---D | C] -- C:\Documents and Settings\PC\Moje dokumenty\Xilisoft Corporation [2009-08-27 10:43:55 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Download Manager [2009-08-21 16:42:34 | 00,000,040 | ---- | C] () -- C:\WINDOWS\winDecrypt.INI [2009-08-20 20:01:25 | 00,000,351 | ---- | C] () -- C:\WINDOWS\pdf2word.INI [2009-08-20 19:02:59 | 00,000,313 | ---- | C] () -- C:\WINDOWS\System32\winpdf.ini [2009-08-19 21:08:21 | 00,139,584 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2009-08-07 19:51:34 | 00,178,430 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat [2009-05-25 20:29:16 | 00,000,102 | ---- | C] () -- C:\WINDOWS\wininit.ini [2009-05-22 09:46:36 | 00,117,912 | ---- | C] () -- C:\WINDOWS\System32\OnlineScannerLang.dll [2009-05-22 09:46:34 | 00,262,112 | ---- | C] () -- C:\WINDOWS\System32\OnlineScannerDLLA.dll [2009-05-22 09:46:34 | 00,245,632 | ---- | C] () -- C:\WINDOWS\System32\OnlineScannerDLLW.dll [2009-05-22 09:46:34 | 00,146,752 | ---- | C] () -- C:\WINDOWS\System32\lnod32umc.dll [2009-05-22 09:46:34 | 00,113,792 | ---- | C] () -- C:\WINDOWS\System32\lnod32upd.dll [2009-05-22 09:46:32 | 00,233,352 | ---- | C] () -- C:\WINDOWS\System32\lnod32apiW.dll [2009-05-22 09:46:32 | 00,204,512 | ---- | C] () -- C:\WINDOWS\System32\lnod32apiA.dll [2009-05-20 09:23:56 | 00,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll [2009-05-19 16:42:30 | 00,001,013 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2009-03-04 16:35:12 | 00,281,760 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys [2009-03-04 16:35:12 | 00,025,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys [2009-02-09 16:59:35 | 00,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009-02-09 14:52:05 | 00,000,039 | ---- | C] () -- C:\WINDOWS\Irremote.ini [2009-02-01 21:08:43 | 00,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009-01-14 18:30:21 | 00,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2009-01-14 18:30:21 | 00,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2009-01-14 18:30:19 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2009-01-14 18:30:19 | 00,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2009-01-14 18:30:19 | 00,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009-01-14 18:30:18 | 00,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-01-14 18:30:18 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2008-12-21 21:35:18 | 00,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2008-12-20 21:51:28 | 00,000,023 | ---- | C] () -- C:\WINDOWS\BlendSettings.ini [2008-12-20 21:41:14 | 01,970,176 | ---- | C] () -- C:\WINDOWS\System32\d3dx9.dll [2008-12-19 19:02:17 | 00,024,576 | R--- | C] () -- C:\WINDOWS\System32\AsIO.dll [2008-12-19 19:02:17 | 00,012,400 | R--- | C] () -- C:\WINDOWS\System32\drivers\AsIO.sys [2008-12-19 19:02:14 | 00,011,832 | ---- | C] () -- C:\WINDOWS\System32\drivers\AsInsHelp64.sys [2008-12-19 19:02:14 | 00,010,216 | ---- | C] () -- C:\WINDOWS\System32\drivers\AsInsHelp32.sys [2008-12-19 18:53:45 | 00,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys [2008-12-19 18:53:36 | 00,032,367 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini [2008-12-19 18:53:36 | 00,010,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2008-10-07 10:13:30 | 00,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll [2008-10-07 10:13:22 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll [2008-10-07 10:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll [2008-10-07 10:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll [2008-10-07 10:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll [2008-10-07 10:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll [2008-10-07 10:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll [2008-10-07 10:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll [2008-10-07 10:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll [2008-10-07 10:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll [2008-04-15 14:00:00 | 00,000,507 | ---- | C] () -- C:\WINDOWS\win.ini [2008-04-15 14:00:00 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [1 C:\WINDOWS\System32\*.tmp files] [1 C:\WINDOWS\*.tmp files] File not found -- C:\Documents and Settings\PC\Moje dokumenty\PC. [2009-09-25 18:20:05 | 00,514,560 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\PC\Pulpit\OTL.exe [2009-09-25 18:02:29 | 00,189,104 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr [2009-09-25 18:01:01 | 00,139,584 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2009-09-25 18:00:37 | 00,189,104 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.exe [2009-09-25 17:59:39 | 00,219,120 | ---- | M] () -- C:\WINDOWS\System32\ativvaxx.cap [2009-09-25 17:12:17 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-09-25 17:12:09 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-09-23 08:47:10 | 00,092,672 | ---- | M] () -- C:\Documents and Settings\PC\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-09-23 08:46:48 | 00,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2009-09-21 17:44:41 | 00,013,686 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-09-19 21:24:52 | 00,327,476 | ---- | M] () -- C:\Documents and Settings\PC\Moje dokumenty\pulpit.JPG [2009-09-18 18:41:21 | 00,001,623 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Need for Speed™ SHIFT.lnk [2009-09-11 23:14:54 | 00,000,118 | ---- | M] () -- C:\WINDOWS\System32\MRT.INI [2009-09-11 23:13:56 | 00,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2009-09-11 02:00:34 | 00,041,872 | ---- | M] () -- C:\WINDOWS\System32\xfcodec.dll [2009-09-09 12:43:08 | 00,210,352 | ---- | M] (Tonec Inc.) -- C:\WINDOWS\System32\idmmbc.dll [2009-09-05 19:32:53 | 00,000,662 | ---- | M] () -- C:\Documents and Settings\PC\Pulpit\Empire Total War.lnk [2009-08-31 10:21:28 | 00,001,593 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BlueSoleil.lnk [2009-08-28 23:38:20 | 24,689,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MRT.exe [2009-08-26 22:59:43 | 02,109,142 | -H-- | M] () -- C:\Documents and Settings\PC\Ustawienia lokalne\Dane aplikacji\IconCache.db < End of report >

**Posty:** 584 · przez **Andziorka** 29 Wrz 2009, 02:57

W okienko OTL wklej poniższy skrypt i klik na Run Fix:

:Processes
explorer.exe

:OTL
O2 - BHO: (Dealio Toolbar) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll (Spigot, Inc.)
O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Dealio Toolbar\SearchSettings.dll (Spigot, Inc.)
O3 - HKLM\..\Toolbar: (Dealio Toolbar) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll (Spigot, Inc.)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [TkBellExe] File not found
O4 - HKU\S-1-5-21-1123561945-1644491937-682003330-1004..\Run: [Real Desktop] C:\Program Files\Real Desktop\Real Desktop.exe File not found
O33 - MountPoints2\{22bfe8a6-d64c-11dd-a7b3-002215ed77a0}\Shell\AutoRun\command - "" = \Firefox\FirefoxPortable.exe
O33 - MountPoints2\{71cf7a91-9601-11de-a936-002215ed77a0}\Shell - "" = AutoRun

:Files
C:\Program Files\Dealio Toolbar

:Commands
[emptytemp]
[start explorer]
[Reboot]

Otwórz notatnik tekstowy i wklej do niego poniższy tekst:

Kod: Zaznacz wszystko: Windows Registry Editor Version 5.00 [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

Zapisz jako->Wybierz Wszystkie pliki->wpisz Fix.reg->Następnie kliknij na zapisany plik i uruchom komputer ponownie.

Przeskanuj komputer tym: http://www.dobreprogramy.pl/Malwarebytes-AntiMalware,Program,Windows,13117.html usuń wszystko co znajdzie i daj loga po kasowaniu (loga z Malware)

**Posty:** 584 · przez **Piotrek1993** 02 Paź 2009, 18:21

Kod: Zaznacz wszystko: Malwarebytes' Anti-Malware 1.41 Wersja bazy definicji: 2775 Windows 5.1.2600 Dodatek Service Pack 3 2009-10-02 18:16:04 mbam-log-2009-10-02 (18-16-04).txt Typ skanowania: Pełne skanowanie (C:\|E:\|) Przeskanowane obiekty: 206602 Upłynęło: 36 minute(s), 45 second(s) Zainfekowane procesy w pamięci: 0 Zainfekowane moduły pamięci: 0 Zainfekowane klucze rejestru: 0 Zainfekowane wartości rejestru: 0 Zainfekowane pliki rejestru: 0 Zainfekowane foldery: 5 Zainfekowane pliki: 6 Zainfekowane procesy w pamięci: (Nie wykryto groźnych plików) Zainfekowane moduły pamięci: (Nie wykryto groźnych plików) Zainfekowane klucze rejestru: (Nie wykryto groźnych plików) Zainfekowane wartości rejestru: (Nie wykryto groźnych plików) Zainfekowane pliki rejestru: (Nie wykryto groźnych plików) Zainfekowane foldery: C:\Program Files\2 find mp3 (Adware.180Solutions) -> Quarantined and deleted successfully. C:\Program Files\2 find mp3\Data (Adware.180Solutions) -> Quarantined and deleted successfully. C:\Program Files\2 find mp3\Downloads (Adware.180Solutions) -> Quarantined and deleted successfully. C:\Program Files\2 find mp3\Incomplete (Adware.180Solutions) -> Quarantined and deleted successfully. C:\Program Files\RelevantKnowledge (Spyware.MarketScore) -> Quarantined and deleted successfully. Zainfekowane pliki: C:\System Volume Information\_restore{6C418D72-B740-4FAD-9B6C-ED034897E2DD}\RP260\A0077547.exe (Trojan.Agent) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{6C418D72-B740-4FAD-9B6C-ED034897E2DD}\RP260\A0077550.exe (Malware.Packer.Mew) -> Quarantined and deleted successfully. C:\Program Files\2 find mp3\Data\SearchKeys.txt (Adware.180Solutions) -> Quarantined and deleted successfully. C:\Program Files\RelevantKnowledge\rlservice.exe (Spyware.MarketScore) -> Quarantined and deleted successfully. C:\Program Files\RelevantKnowledge\rlvknlg.exe (Spyware.MarketScore) -> Quarantined and deleted successfully. C:\Documents and Settings\PC\Dane aplikacji\wiaserva.log (Malware.Trace) -> Quarantined and deleted successfully.

Przepraszam, że dopiero teraz odpisuję alenie miałem dostępu do komputera stacjonarnego.