Zautomatyzowane zapytania i bluescreen

**Posty:** 185 · przez **ykes** 29 Mar 2010, 18:30

Witam, od pewnego czasu nie mogę korzystać z wyszukiwarki google, za każdym razem pojawia się informacja : "Twój komputer lub sieć może wysyłać zautomatyzowane zapytania. Aby chronić naszych użytkowników, nie możemy w tej chwili przetworzyć Twojego żądania.". Słyszałem gdzieś, że może to być wina wirusów i innego syfu więc postanowiłem wstawić logi z OTL i Gmer. Niestety po uruchomieniu Gmera wywaliło bluescreena, za pierwszym razem w czasie wyszukiwania, za drugim od razu po włączeniu programu.

Niestety nie mogę wrzucić logów OTL i Extras równocześnie bo razem post przekroczy 600000 znaków, daję tylko OTL.

Kod: Zaznacz wszystko: OTL logfile created on: 2010-03-29 17:41:59 - Run 1 OTL by OldTimer - Version 3.1.37.3 Folder = C:\Users\Ykes\Downloads Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 74,00% Memory free 6,00 Gb Paging File | 6,00 Gb Available in Paging File | 87,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 465,66 Gb Total Space | 334,00 Gb Free Space | 71,73% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: KY Current User Name: Ykes Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010-03-29 17:40:22 | 000,555,520 | ---- | M] (OldTimer Tools) -- C:\Users\Ykes\Downloads\OTL.exe PRC - [2010-02-19 14:00:32 | 000,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2010-01-11 22:00:00 | 000,240,232 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2009-12-08 12:33:30 | 008,120,864 | ---- | M] (Realtek Semiconductor) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe PRC - [2009-10-31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009-07-21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe PRC - [2009-07-14 03:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2009-07-14 03:14:29 | 003,179,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppsvc.exe PRC - [2009-05-13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe PRC - [2009-03-02 13:08:47 | 000,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010-03-29 17:40:22 | 000,555,520 | ---- | M] (OldTimer Tools) -- C:\Users\Ykes\Downloads\OTL.exe MOD - [2009-07-14 03:16:15 | 000,099,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sspicli.dll MOD - [2009-07-14 03:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sechost.dll MOD - [2009-07-14 03:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\samcli.dll MOD - [2009-07-14 03:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\profapi.dll MOD - [2009-07-14 03:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netutils.dll MOD - [2009-07-14 03:15:35 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KernelBase.dll MOD - [2009-07-14 03:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devobj.dll MOD - [2009-07-14 03:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptbase.dll MOD - [2009-07-14 03:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cfgmgr32.dll MOD - [2009-07-14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2010-01-11 22:00:00 | 000,240,232 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2010-01-11 19:28:22 | 000,316,816 | ---- | M] (Protection Technology) [Auto | Stopped] -- C:\Windows\System32\appdrvrem01.exe -- (appdrvrem01) Application Driver Auto Removal Service (01) SRV - [2009-08-21 16:36:08 | 004,639,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc) SRV - [2009-07-21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2009-07-14 03:16:21 | 000,185,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wwansvc.dll -- (WwanSvc) SRV - [2009-07-14 03:16:17 | 000,151,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wbiosrvc.dll -- (WbioSrvc) SRV - [2009-07-14 03:16:17 | 000,119,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\umpo.dll -- (Power) SRV - [2009-07-14 03:16:16 | 000,037,376 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\themeservice.dll -- (Themes) SRV - [2009-07-14 03:16:15 | 000,053,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sppuinotify.dll -- (sppuinotify) SRV - [2009-07-14 03:16:13 | 000,043,520 | ---- | M] (Microsoft Corporation) [Unknown | Running] -- C:\Windows\System32\RpcEpMap.dll -- (RpcEptMapper) SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009-07-14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2009-07-14 03:16:12 | 000,269,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\pnrpsvc.dll -- (PNRPsvc) SRV - [2009-07-14 03:16:12 | 000,269,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\pnrpsvc.dll -- (p2pimsvc) SRV - [2009-07-14 03:16:12 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\provsvc.dll -- (HomeGroupProvider) SRV - [2009-07-14 03:16:12 | 000,020,480 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\pnrpauto.dll -- (PNRPAutoReg) SRV - [2009-07-14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2009-07-14 03:15:36 | 000,194,560 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\ListSvc.dll -- (HomeGroupListener) SRV - [2009-07-14 03:15:21 | 000,797,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FntCache.dll -- (FontCache) SRV - [2009-07-14 03:15:11 | 000,253,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\dhcpcore.dll -- (Dhcp) SRV - [2009-07-14 03:15:10 | 000,218,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\defragsvc.dll -- (defragsvc) SRV - [2009-07-14 03:14:59 | 000,076,800 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\System32\bdesvc.dll -- (BDESVC) SRV - [2009-07-14 03:14:58 | 000,088,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\AxInstSv.dll -- (AxInstSV) Instalator formantów ActiveX (AxInstSV) SRV - [2009-07-14 03:14:53 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\appidsvc.dll -- (AppIDSvc) SRV - [2009-07-14 03:14:29 | 003,179,520 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\sppsvc.exe -- (sppsvc) SRV - [2009-05-13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2008-12-22 12:52:16 | 000,104,944 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2010-01-12 21:35:36 | 000,056,816 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt) DRV - [2010-01-12 06:03:33 | 011,586,280 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2010-01-11 19:28:23 | 002,712,176 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\Windows\System32\drivers\appdrv01.sys -- (appdrv01) Application Driver (01) DRV - [2009-12-08 12:16:08 | 002,975,776 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTKVHDA.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2009-07-14 03:26:21 | 000,015,952 | ---- | M] (CMD Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\cmdide.sys -- (cmdide) DRV - [2009-07-14 03:26:17 | 000,297,552 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\adpahci.sys -- (adpahci) DRV - [2009-07-14 03:26:15 | 000,422,976 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\adp94xx.sys -- (adp94xx) DRV - [2009-07-14 03:26:15 | 000,159,312 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\amdsbs.sys -- (amdsbs) DRV - [2009-07-14 03:26:15 | 000,146,512 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\adpu320.sys -- (adpu320) DRV - [2009-07-14 03:26:15 | 000,086,608 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\arcsas.sys -- (arcsas) DRV - [2009-07-14 03:26:15 | 000,079,952 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\amdsata.sys -- (amdsata) DRV - [2009-07-14 03:26:15 | 000,076,368 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\arc.sys -- (arc) DRV - [2009-07-14 03:26:15 | 000,023,616 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\amdxata.sys -- (amdxata) DRV - [2009-07-14 03:26:15 | 000,014,400 | ---- | M] (Acer Laboratories Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\aliide.sys -- (aliide) DRV - [2009-07-14 03:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\nvstor.sys -- (nvstor) DRV - [2009-07-14 03:20:44 | 000,117,312 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\nvraid.sys -- (nvraid) DRV - [2009-07-14 03:20:44 | 000,044,624 | ---- | M] (IBM Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\nfrd960.sys -- (nfrd960) DRV - [2009-07-14 03:20:37 | 000,089,168 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\lsi_sas.sys -- (LSI_SAS) DRV - [2009-07-14 03:20:36 | 000,332,352 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\iaStorV.sys -- (iaStorV) DRV - [2009-07-14 03:20:36 | 000,235,584 | ---- | M] (LSI Corporation, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\MegaSR.sys -- (MegaSR) DRV - [2009-07-14 03:20:36 | 000,133,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\ksecpkg.sys -- (KSecPkg) DRV - [2009-07-14 03:20:36 | 000,096,848 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\lsi_scsi.sys -- (LSI_SCSI) DRV - [2009-07-14 03:20:36 | 000,095,824 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\lsi_fc.sys -- (LSI_FC) DRV - [2009-07-14 03:20:36 | 000,054,864 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\lsi_sas2.sys -- (LSI_SAS2) DRV - [2009-07-14 03:20:36 | 000,041,040 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\iirsp.sys -- (iirsp) DRV - [2009-07-14 03:20:36 | 000,030,800 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\megasas.sys -- (megasas) DRV - [2009-07-14 03:20:36 | 000,013,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\hwpolicy.sys -- (hwpolicy) DRV - [2009-07-14 03:20:28 | 000,453,712 | ---- | M] (Emulex) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\elxstor.sys -- (elxstor) DRV - [2009-07-14 03:20:28 | 000,070,720 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\djsvs.sys -- (aic78xx) DRV - [2009-07-14 03:20:28 | 000,067,152 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\HpSAMD.sys -- (HpSAMD) DRV - [2009-07-14 03:20:28 | 000,046,160 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\fsdepends.sys -- (FsDepends) DRV - [2009-07-14 03:19:11 | 000,141,904 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vsmraid.sys -- (vsmraid) DRV - [2009-07-14 03:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vmbus.sys -- (vmbus) DRV - [2009-07-14 03:19:10 | 000,159,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vhdmp.sys -- (vhdmp) DRV - [2009-07-14 03:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\vmstorfl.sys -- (storflt) DRV - [2009-07-14 03:19:10 | 000,032,832 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\vdrvroot.sys -- (vdrvroot) DRV - [2009-07-14 03:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\storvsc.sys -- (storvsc) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\wimmount.sys -- (WIMMount) DRV - [2009-07-14 03:19:10 | 000,016,976 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\viaide.sys -- (viaide) DRV - [2009-07-14 03:19:04 | 001,383,488 | ---- | M] (QLogic Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\ql2300.sys -- (ql2300) DRV - [2009-07-14 03:19:04 | 000,173,648 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\rdyboost.sys -- (rdyboost) DRV - [2009-07-14 03:19:04 | 000,106,064 | ---- | M] (QLogic Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\ql40xx.sys -- (ql40xx) DRV - [2009-07-14 03:19:04 | 000,077,888 | ---- | M] (Silicon Integrated Systems) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\sisraid4.sys -- (SiSRaid4) DRV - [2009-07-14 03:19:04 | 000,043,088 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\pcw.sys -- (pcw) DRV - [2009-07-14 03:19:04 | 000,040,016 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\SiSRaid2.sys -- (SiSRaid2) DRV - [2009-07-14 03:19:04 | 000,021,072 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\stexstor.sys -- (stexstor) DRV - [2009-07-14 03:17:54 | 000,369,568 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\cng.sys -- (CNG) DRV - [2009-07-14 02:57:25 | 000,272,128 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\Brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM) DRV - [2009-07-14 02:02:41 | 000,018,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rdpbus.sys -- (rdpbus) DRV - [2009-07-14 02:01:41 | 000,007,168 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\RDPREFMP.sys -- (RDPREFMP) DRV - [2009-07-14 01:55:00 | 000,049,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\agilevpn.sys -- (RasAgileVpn) WAN Miniport (IKEv2) DRV - [2009-07-14 01:53:51 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\wfplwf.sys -- (WfpLwf) DRV - [2009-07-14 01:52:44 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ndiscap.sys -- (NdisCap) DRV - [2009-07-14 01:52:02 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vwifibus.sys -- (vwifibus) DRV - [2009-07-14 01:52:00 | 000,163,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\1394ohci.sys -- (1394ohci) DRV - [2009-07-14 01:51:35 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\umpass.sys -- (UmPass) DRV - [2009-07-14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb) DRV - [2009-07-14 01:51:08 | 000,004,096 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mshidkmdf.sys -- (mshidkmdf) DRV - [2009-07-14 01:46:55 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\MTConfig.sys -- (MTConfig) DRV - [2009-07-14 01:45:26 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CompositeBus.sys -- (CompositeBus) DRV - [2009-07-14 01:36:52 | 000,050,176 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\appid.sys -- (AppID) DRV - [2009-07-14 01:33:50 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | Unknown | Stopped] -- C:\Windows\System32\drivers\scfilter.sys -- (scfilter) DRV - [2009-07-14 01:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vms3cap.sys -- (s3cap) DRV - [2009-07-14 01:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\VMBusHID.sys -- (VMBusHID) DRV - [2009-07-14 01:24:05 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\discache.sys -- (discache) DRV - [2009-07-14 01:19:21 | 000,021,504 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\HidBatt.sys -- (HidBatt) DRV - [2009-07-14 01:16:36 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\acpipmi.sys -- (AcpiPmi) DRV - [2009-07-14 01:11:04 | 000,052,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\amdppm.sys -- (AmdPPM) DRV - [2009-07-14 00:54:14 | 000,026,624 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\hcw85cir.sys -- (hcw85cir) DRV - [2009-07-14 00:53:33 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BrUsbMdm.sys -- (BrUsbMdm) DRV - [2009-07-14 00:53:33 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BrUsbSer.sys -- (BrUsbSer) DRV - [2009-07-14 00:53:32 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BrSerWdm.sys -- (BrSerWdm) DRV - [2009-07-14 00:53:28 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\BrFiltLo.sys -- (BrFiltLo) DRV - [2009-07-14 00:53:28 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\BrFiltUp.sys -- (BrFiltUp) DRV - [2009-07-14 00:02:52 | 000,139,776 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rt86win7.sys -- (RTL8167) DRV - [2009-07-14 00:02:49 | 000,229,888 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\b57nd60x.sys -- (b57nd60x) DRV - [2009-07-14 00:02:48 | 003,100,160 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\evbdx.sys -- (ebdrv) DRV - [2009-07-14 00:02:48 | 000,430,080 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\bxvbdx.sys -- (b06bdrv) DRV - [2009-05-11 10:12:24 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009-03-30 10:33:07 | 000,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb) DRV - [2009-02-13 12:35:05 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio) DRV - [2008-11-04 20:21:04 | 000,083,296 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\jraid.sys -- (JRAID) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2317884822-3461058111-2110478192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:1.9.9.57 FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-02-19 14:00:33 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-03-28 22:17:24 | 000,000,000 | ---D | M] [2010-01-11 16:47:42 | 000,000,000 | ---D | M] -- C:\Users\Ykes\AppData\Roaming\mozilla\Extensions [2010-03-28 22:36:34 | 000,000,000 | ---D | M] -- C:\Users\Ykes\AppData\Roaming\mozilla\Firefox\Profiles\3n8kk1kl.default\extensions [2010-03-20 15:46:55 | 000,000,000 | ---D | M] (NoScript) -- C:\Users\Ykes\AppData\Roaming\mozilla\Firefox\Profiles\3n8kk1kl.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232} [2010-03-28 22:36:34 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2010-01-12 22:03:50 | 000,063,488 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll [2009-12-22 05:48:34 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2009-12-22 05:48:34 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2009-12-22 05:48:34 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2009-12-22 05:48:34 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2009-12-22 05:48:34 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2009-12-22 05:48:34 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-06-10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe () O4 - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Value error. File not found O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Value error. File not found O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.0.2.2 87.239.216.6 O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{655dd238-0604-11df-98c8-001fd0af256a}\Shell - "" = AutoRun O33 - MountPoints2\{655dd238-0604-11df-98c8-001fd0af256a}\Shell\AutoRun\command - "" = E:\Setup.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010-03-28 15:47:37 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Desktop\Banjo [2010-03-25 23:31:34 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Desktop\2. Powstanie warszawskie [2010-03-25 18:13:15 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Desktop\Janis Joplin - Cheap Thrills [2010-03-24 06:46:08 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Desktop\VA-Public [2010-03-23 19:17:27 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Desktop\Brigadier Grahams Total Patriot v1.6 [2010-03-23 19:16:34 | 000,000,000 | ---D | C] -- C:\Users\Ykes\AppData\Local\Matt_Chambers [2010-03-23 19:16:27 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Desktop\ModManager_1-5 [2010-03-23 16:59:08 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonBJ [2010-03-22 22:54:54 | 000,000,000 | ---D | C] -- C:\Users\Ykes\AppData\Roaming\The Creative Assembly [2010-03-22 22:52:03 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Desktop\European Wars 2 0.61 Version [2010-03-22 22:19:26 | 000,000,000 | ---D | C] -- C:\a [2010-03-22 21:48:47 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Steam [2010-03-22 21:48:45 | 000,000,000 | ---D | C] -- C:\Program Files\Steam [2010-03-21 15:41:38 | 000,000,000 | ---D | C] -- C:\Program Files\Music [2010-03-20 18:46:50 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Desktop\PMTW_Orthodox_Music_pack(2) [2010-03-20 18:39:47 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Desktop\eventy historyczne minimod [2010-03-20 16:17:28 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Desktop\EU_book [2010-03-17 16:19:37 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Documents\4A Games [2010-03-17 16:17:40 | 000,000,000 | ---D | C] -- C:\Users\Ykes\AppData\Local\4A Games [2010-03-17 16:06:33 | 000,000,000 | ---D | C] -- C:\Program Files\THQ [2010-03-17 15:28:05 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Desktop\HHH [2010-03-16 12:21:16 | 000,000,000 | ---D | C] -- C:\Windows\Sun [2010-03-12 18:15:50 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Documents\Stronghold Crusader [2010-03-12 18:13:13 | 000,000,000 | ---D | C] -- C:\Program Files\Firefly Studios [2010-03-12 18:11:33 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Desktop\Stronghold Crusader Extreme [2010-03-10 21:22:35 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Desktop\SC2_V2.2.1_Launcher [2010-03-10 14:17:04 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_6.dll [2010-03-10 14:17:04 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_6.dll [2010-03-10 14:17:04 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_4.dll [2010-03-10 14:17:04 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_7.dll [2010-03-10 14:12:30 | 000,000,000 | ---D | C] -- C:\Program Files\1C Company [2010-03-09 13:51:03 | 000,000,000 | ---D | C] -- C:\Users\Ykes\AppData\Roaming\Tropico3 [2010-03-09 13:47:16 | 000,000,000 | ---D | C] -- C:\Program Files\Tropico 3 [2010-03-08 12:55:52 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Desktop\SC2 V2.2.1 Launcher [2010-03-08 11:39:02 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Documents\StarCraft II Beta [2010-03-08 11:39:02 | 000,000,000 | ---D | C] -- C:\Program Files\StarCraft II Beta [2010-03-08 11:39:02 | 000,000,000 | ---D | C] -- C:\Users\Ykes\AppData\Local\Blizzard Entertainment [2010-03-08 11:39:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment [2010-03-08 11:39:02 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Blizzard Entertainment [2010-03-08 11:38:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard [2010-03-08 11:36:42 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Desktop\StarCraft II Beta enUS 13891 Installer [2010-03-07 01:34:03 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browserchoice.exe [2010-03-07 00:59:03 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Desktop\H [2010-03-03 16:53:24 | 000,137,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSMAPI32.OCX [2010-03-03 16:53:23 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSMPIDE.DLL [2010-03-03 16:53:23 | 000,000,000 | ---D | C] -- C:\Program Files\PDFCreator [2010-03-03 16:46:26 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Desktop\Basia [2010-03-03 15:46:46 | 000,000,000 | ---D | C] -- C:\Basia [2010-03-02 19:53:35 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Desktop\ChopBlech [2010-03-01 18:51:29 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip [2010-03-01 16:54:06 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Desktop\all [2010-02-28 02:09:27 | 011,586,280 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvlddmkm.sys [2010-02-28 02:09:27 | 000,068,200 | ---- | C] (Khronos Group) -- C:\Windows\System32\OpenCL.dll [2010-02-28 02:09:27 | 000,010,920 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvBridge.kmd [2010-02-28 02:09:26 | 014,924,392 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvoglv32.dll [2010-02-28 02:09:26 | 009,388,648 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvd3dum.dll [2010-02-28 02:09:26 | 004,338,792 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvencodemft.dll [2010-02-28 02:09:26 | 004,321,384 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvwgf2um.dll [2010-02-28 02:09:26 | 002,243,176 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvid.dll [2010-02-28 02:09:26 | 000,318,568 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvdecodemft.dll [2010-02-28 02:09:24 | 011,639,400 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcompiler.dll [2010-02-28 02:09:24 | 004,077,672 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvenc.dll [2010-02-28 02:09:24 | 004,061,800 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuda.dll [2010-02-28 02:09:24 | 001,280,616 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvapi.dll [2010-02-28 02:09:24 | 000,182,888 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcod189.dll [2010-02-28 02:09:24 | 000,182,888 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcod.dll [2010-02-28 02:09:23 | 000,000,000 | ---D | C] -- C:\NVIDIA [2010-02-28 01:58:40 | 127,236,744 | ---- | C] (NVIDIA Corporation) -- C:\Users\Ykes\Desktop\196.21_desktop_win7_winvista_32bit_international_whql.exe [2010-02-27 18:24:05 | 000,000,000 | ---D | C] -- C:\Users\Ykes\Documents\BFBC2 [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010-03-29 17:41:49 | 001,523,412 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI [2010-03-29 17:41:49 | 000,687,590 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2010-03-29 17:41:49 | 000,606,992 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2010-03-29 17:41:49 | 000,131,176 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2010-03-29 17:41:49 | 000,103,370 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2010-03-29 17:39:12 | 000,001,028 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010-03-29 17:39:11 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010-03-29 17:37:36 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010-03-29 17:37:35 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-03-29 17:37:29 | 2615,271,424 | -HS- | M] () -- C:\hiberfil.sys [2010-03-29 17:36:42 | 003,145,728 | -HS- | M] () -- C:\Users\Ykes\NTUSER.DAT [2010-03-29 17:36:39 | 002,944,392 | -H-- | M] () -- C:\Users\Ykes\AppData\Local\IconCache.db [2010-03-29 17:15:34 | 000,010,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010-03-29 17:15:34 | 000,010,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010-03-28 13:57:43 | 071,795,529 | ---- | M] () -- C:\Users\Ykes\Desktop\Banjo.rar [2010-03-25 23:07:55 | 042,278,348 | ---- | M] () -- C:\Users\Ykes\Desktop\2. Powstanie warszawskie.rar [2010-03-23 19:16:00 | 000,034,992 | ---- | M] () -- C:\Users\Ykes\Desktop\ModManager_1-5.zip [2010-03-23 18:58:34 | 555,875,166 | ---- | M] () -- C:\Users\Ykes\Desktop\Brigadier Grahams Total Patriot v1.6.rar [2010-03-22 22:35:07 | 135,106,863 | ---- | M] () -- C:\Users\Ykes\Desktop\European Wars 2 0.61 Version.7z [2010-03-22 22:27:13 | 000,001,374 | ---- | M] () -- C:\Users\Ykes\Desktop\Broken Crescent.lnk [2010-03-22 22:16:25 | 818,041,702 | ---- | M] () -- C:\Users\Ykes\Desktop\bc20.exe [2010-03-22 21:48:46 | 000,002,513 | ---- | M] () -- C:\Users\Public\Desktop\Steam.lnk [2010-03-21 15:31:54 | 052,328,666 | ---- | M] () -- C:\Users\Ykes\Desktop\PMTW_MUSIC_PACK_01.exe [2010-03-20 18:45:26 | 110,970,244 | ---- | M] () -- C:\Users\Ykes\Desktop\PMTW_Orthodox_Music_pack(2).rar [2010-03-20 18:34:29 | 005,400,087 | ---- | M] () -- C:\Users\Ykes\Desktop\eventy historyczne minimod.rar [2010-03-17 16:10:28 | 000,001,078 | ---- | M] () -- C:\Users\Public\Desktop\Metro 2033.lnk [2010-03-12 16:29:06 | 904,891,885 | ---- | M] () -- C:\Users\Ykes\Desktop\Stronghold Crusader Extreme.rar [2010-03-10 14:16:10 | 000,001,214 | ---- | M] () -- C:\Users\Public\Desktop\Star Wolves 3 - Civil War.lnk [2010-03-09 13:47:40 | 000,000,976 | ---- | M] () -- C:\Users\Public\Desktop\Tropico 3.lnk [2010-03-08 12:56:44 | 018,306,235 | ---- | M] () -- C:\Users\Ykes\Desktop\SC2_AI_MAPPACK_V1.rar [2010-03-08 11:40:33 | 000,001,100 | ---- | M] () -- C:\Users\Public\Desktop\StarCraft II Beta.lnk [2010-03-03 18:40:37 | 000,039,578 | ---- | M] () -- C:\Users\Ykes\.recently-used.xbel [2010-03-02 19:28:20 | 048,570,730 | ---- | M] () -- C:\Users\Ykes\Desktop\ChopBlech.rar [2010-03-01 17:57:12 | 000,208,393 | ---- | M] () -- C:\Users\Ykes\Desktop\matematyka-odp.pdf [2010-03-01 17:15:15 | 000,320,919 | ---- | M] () -- C:\Users\Ykes\Desktop\matematyka-1.pdf [2010-02-28 02:00:48 | 127,236,744 | ---- | M] (NVIDIA Corporation) -- C:\Users\Ykes\Desktop\196.21_desktop_win7_winvista_32bit_international_whql.exe [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-03-28 13:52:39 | 071,795,529 | ---- | C] () -- C:\Users\Ykes\Desktop\Banjo.rar [2010-03-25 23:06:27 | 042,278,348 | ---- | C] () -- C:\Users\Ykes\Desktop\2. Powstanie warszawskie.rar [2010-03-23 19:15:59 | 000,034,992 | ---- | C] () -- C:\Users\Ykes\Desktop\ModManager_1-5.zip [2010-03-23 18:38:54 | 555,875,166 | ---- | C] () -- C:\Users\Ykes\Desktop\Brigadier Grahams Total Patriot v1.6.rar [2010-03-22 22:27:13 | 000,001,374 | ---- | C] () -- C:\Users\Ykes\Desktop\Broken Crescent.lnk [2010-03-22 22:20:49 | 135,106,863 | ---- | C] () -- C:\Users\Ykes\Desktop\European Wars 2 0.61 Version.7z [2010-03-22 21:48:46 | 000,002,513 | ---- | C] () -- C:\Users\Public\Desktop\Steam.lnk [2010-03-22 21:10:30 | 818,041,702 | ---- | C] () -- C:\Users\Ykes\Desktop\bc20.exe [2010-03-21 15:29:51 | 052,328,666 | ---- | C] () -- C:\Users\Ykes\Desktop\PMTW_MUSIC_PACK_01.exe [2010-03-20 18:33:39 | 005,400,087 | ---- | C] () -- C:\Users\Ykes\Desktop\eventy historyczne minimod.rar [2010-03-20 18:30:46 | 110,970,244 | ---- | C] () -- C:\Users\Ykes\Desktop\PMTW_Orthodox_Music_pack(2).rar [2010-03-17 16:10:28 | 000,001,078 | ---- | C] () -- C:\Users\Public\Desktop\Metro 2033.lnk [2010-03-12 15:44:53 | 904,891,885 | ---- | C] () -- C:\Users\Ykes\Desktop\Stronghold Crusader Extreme.rar [2010-03-10 14:16:10 | 000,001,214 | ---- | C] () -- C:\Users\Public\Desktop\Star Wolves 3 - Civil War.lnk [2010-03-09 13:47:40 | 000,000,976 | ---- | C] () -- C:\Users\Public\Desktop\Tropico 3.lnk [2010-03-09 12:12:06 | 2160,492,544 | ---- | C] () -- C:\Users\Ykes\Desktop\Tropico 3.iso [2010-03-08 12:54:23 | 018,306,235 | ---- | C] () -- C:\Users\Ykes\Desktop\SC2_AI_MAPPACK_V1.rar [2010-03-08 11:39:02 | 000,001,100 | ---- | C] () -- C:\Users\Public\Desktop\StarCraft II Beta.lnk [2010-03-03 18:40:37 | 000,039,578 | ---- | C] () -- C:\Users\Ykes\.recently-used.xbel [2010-03-03 16:53:24 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll [2010-03-02 19:08:07 | 048,570,730 | ---- | C] () -- C:\Users\Ykes\Desktop\ChopBlech.rar [2010-03-01 17:57:12 | 000,208,393 | ---- | C] () -- C:\Users\Ykes\Desktop\matematyka-odp.pdf [2010-03-01 17:15:15 | 000,320,919 | ---- | C] () -- C:\Users\Ykes\Desktop\matematyka-1.pdf [2010-02-28 02:09:27 | 000,007,437 | ---- | C] () -- C:\Windows\System32\nvinfo.pb [2010-02-22 16:21:05 | 000,146,432 | ---- | C] () -- C:\Windows\System32\APOMngr.DLL [2010-02-22 16:21:05 | 000,072,704 | ---- | C] () -- C:\Windows\System32\CmdRtr.DLL [2010-02-07 00:44:26 | 000,043,520 | ---- | C] () -- C:\Windows\System32\CmdLineExt03.dll [2010-02-04 17:49:25 | 000,138,056 | ---- | C] () -- C:\Users\Ykes\AppData\Roaming\PnkBstrK.sys [2010-01-15 22:31:00 | 000,000,017 | ---- | C] () -- C:\Users\Ykes\AppData\Local\resmon.resmoncfg [2010-01-13 14:53:11 | 000,178,176 | ---- | C] () -- C:\Windows\System32\unrar.dll [2010-01-13 14:53:11 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini [2010-01-13 14:53:10 | 000,205,824 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll [2010-01-13 14:53:09 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll [2010-01-13 14:53:08 | 000,085,504 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2010-01-13 14:53:08 | 000,000,547 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll.manifest [2010-01-11 22:50:05 | 000,139,128 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2009-07-14 01:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll [2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll [color=#E56717]========== LOP Check ==========[/color] [2010-02-19 16:15:52 | 000,000,000 | ---D | M] -- C:\Users\Ykes\AppData\Roaming\Command and Conquer 4 Beta [2010-01-20 22:49:56 | 000,000,000 | ---D | M] -- C:\Users\Ykes\AppData\Roaming\DAEMON Tools Lite [2010-01-12 00:28:55 | 000,000,000 | ---D | M] -- C:\Users\Ykes\AppData\Roaming\Gadu-Gadu 10 [2010-02-16 21:46:46 | 000,000,000 | ---D | M] -- C:\Users\Ykes\AppData\Roaming\gtk-2.0 [2010-01-11 18:37:42 | 000,000,000 | ---D | M] -- C:\Users\Ykes\AppData\Roaming\Mount&Blade [2010-02-06 15:23:02 | 000,000,000 | ---D | M] -- C:\Users\Ykes\AppData\Roaming\OpenOffice.org [2010-03-22 22:54:54 | 000,000,000 | ---D | M] -- C:\Users\Ykes\AppData\Roaming\The Creative Assembly [2010-03-12 22:15:31 | 000,000,000 | ---D | M] -- C:\Users\Ykes\AppData\Roaming\Tropico3 [2010-03-20 15:46:10 | 000,032,590 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] < End of report >

**Posty:** 584 · przez **Andziorka** 29 Mar 2010, 19:07

Wykonaj: http://www.forumpc.pl/index.php?showtopic=16074 to nie wina wirusów, jest czysto.

**Posty:** 185 · przez **ykes** 30 Mar 2010, 20:18

Pokazuje coś takiego, niestety nie udało mi się pobrać odpowiednich symboli, wiec tak jak pisali na tej stronie opis możne być błędny. Zainstalowałem też to, ale nic nie dało.

Kod: Zaznacz wszystko: Microsoft (R) Windows Debugger Version 6.12.0002.633 X86 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Windows\Minidump\032910-18468-01.dmp] Mini Kernel Dump File: Only registers and stack trace are available Symbol search path is: *** Invalid *** **************************************************************************** * Symbol loading may be unreliable without a symbol search path. * * Use .symfix to have the debugger choose a symbol path. * * After setting your symbol path, use .reload to refresh symbol locations. * **************************************************************************** Executable search path is: ********************************************************************* * Symbols can not be loaded because symbol path is not initialized. * * * * The Symbol Path can be set by: * * using the _NT_SYMBOL_PATH environment variable. * * using the -y <symbol_path> argument when starting the debugger. * * using .sympath and .sympath+ * ********************************************************************* Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2 *** WARNING: Unable to verify timestamp for ntkrnlpa.exe *** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe Windows 7 Kernel Version 7600 MP (8 procs) Free x86 compatible Product: WinNt, suite: TerminalServer SingleUserTS Built by: 7600.16481.x86fre.win7_gdr.091207-1941 Machine Name: Kernel base = 0x82c08000 PsLoadedModuleList = 0x82d50810 Debug session time: Mon Mar 29 17:51:49.762 2010 (UTC + 2:00) System Uptime: 0 days 0:04:43.778 ********************************************************************* * Symbols can not be loaded because symbol path is not initialized. * * * * The Symbol Path can be set by: * * using the _NT_SYMBOL_PATH environment variable. * * using the -y <symbol_path> argument when starting the debugger. * * using .sympath and .sympath+ * ********************************************************************* Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2 *** WARNING: Unable to verify timestamp for ntkrnlpa.exe *** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe Loading Kernel Symbols ............................................................... ................................................................ .................... Loading User Symbols Loading unloaded module list ......... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 1000008E, {c0000005, 82c70fde, 90007a44, 0} ***** Kernel symbols are WRONG. Please fix symbols to do analysis. ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* Probably caused by : ntkrnlpa.exe ( nt+68fde ) Followup: MachineOwner ---------

**Posty:** 18165 · przez **wojtas** 30 Mar 2010, 21:19

poczytaj tu:

http://www.google.com/support/forum/p/Wyszukiwarka/thread?tid=78790fa0a2f1b827&hl=pl

Autor postu otrzymał pochwałę

**Posty:** 584 · przez **Andziorka** 31 Mar 2010, 01:39

Wykonaj: http://andziorka.wordpress.com/2009/11/04/probably-caused-by-ntkrpamp-exe/

Autor postu otrzymał pochwałę

**Posty:** 185 · przez **ykes** 14 Kwi 2010, 16:13

A propos aktualizacji biosu, na stronie producenta jest 9 plików do pobrania, f12 to najnowsza wersja, która zawiera w sobie wszystkie pozostałe aktualizacje ?

Dodano 15.04.2010 18:42:17:
W jaki sposób aktualizuje się biosa ? Ściągniętą aktualizacje mam zgrać na jakąś dyskietkę albo płytę, czy wystarczy odpalić instalkę ?