Zawieszenie paska zadań wraz z systemem

[dmn21]

Witam, najprawdopodobniej mam jakieś infekcje w systemie. Dokładniej rzecz biorąc zawiesza się system i bez resetowania komputera się nie obejdzie... Objawia się to poprzez zawieszenia się ikon na pasku, a jak klikam na ikony z kursora robi się klepsydra jak by mówiła że coś myśli ale i tak nic z tego. Można tak czekac i nie zniknie klepsydra. czy potrzebny będzie format? Czy da się go ominąc??

Kod: Zaznacz wszystko

OTL logfile created on: 2009-11-08 18:56:42 - Run 1
OTL by OldTimer - Version 3.1.4.0     Folder = C:\Documents and Settings\DMN\Pulpit
Windows XP Professional Edition Dodatek Service Pack. 1 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2800.1106)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

1,75 Gb Total Physical Memory | 1,24 Gb Available Physical Memory | 70,89% Memory free
3,60 Gb Paging File | 3,19 Gb Available in Paging File | 88,47% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37,55 Gb Total Space | 22,90 Gb Free Space | 60,99% Space Free | Partition Type: NTFS
Drive D: | 195,32 Gb Total Space | 170,50 Gb Free Space | 87,29% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: MUZZO
Current User Name: DMN
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: On
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2009-11-08 18:52:24 | 00,528,896 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\DMN\Pulpit\OTL.exe
PRC - [2009-10-28 12:30:13 | 00,307,704 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009-05-28 10:23:12 | 10,486,376 | ---- | M] (GG Network S.A.) -- C:\Program Files\Nowe Gadu-Gadu\gg.exe
PRC - [2009-05-28 09:33:44 | 00,077,824 | ---- | M] () -- C:\Program Files\Nowe Gadu-Gadu\spellchecker_gg.exe
PRC - [2009-05-02 18:16:12 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2009-05-02 18:16:12 | 00,148,888 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe
PRC - [2008-03-07 14:00:26 | 00,028,672 | ---- | M] (PreSonus Audio Electronics) -- C:\Program Files\AudioBox USB\InstPresonusUSBDrv.exe
PRC - [2008-01-10 03:56:03 | 00,512,000 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\ati2evxx.exe
PRC - [2008-01-10 03:56:03 | 00,512,000 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\ati2evxx.exe
PRC - [2007-07-17 11:13:56 | 00,049,152 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
PRC - [2007-07-17 11:13:34 | 00,049,152 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
PRC - [2006-12-23 17:05:20 | 00,143,360 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
PRC - [2006-12-23 17:04:42 | 00,905,216 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
PRC - [2006-12-23 16:54:04 | 00,262,144 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
PRC - [2006-08-15 08:45:46 | 00,856,064 | R--- | M] (Sony Ericsson Mobile Communications AB) -- C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
PRC - [2006-07-21 09:14:36 | 00,086,016 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SoundMan.exe
PRC - [2006-03-09 02:00:28 | 00,212,992 | ---- | M] (Popwire AB) -- C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe
PRC - [2005-10-26 17:17:24 | 00,159,744 | R--- | M] (Sony Ericsson Mobile Communications AB) -- C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
PRC - [2005-08-10 08:54:34 | 00,385,024 | R--- | M] (Teleca Software Solutions) -- C:\Program Files\Common Files\Teleca Shared\Generic.exe
PRC - [2005-06-06 23:46:24 | 00,057,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
PRC - [2004-11-15 15:18:50 | 01,670,144 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe
PRC - [2004-08-11 00:45:04 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wdfmgr.exe
PRC - [2002-09-28 23:00:00 | 01,005,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2002-09-28 23:00:00 | 00,091,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\IEXPLORE.EXE


[color=#E56717]========== Modules (SafeList) ==========[/color]

MOD - [2009-11-08 18:52:24 | 00,528,896 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\DMN\Pulpit\OTL.exe
MOD - [2006-08-25 16:53:59 | 00,925,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.1891_x-ww_7d3bbc01\comctl32.dll
MOD - [2002-09-28 23:00:00 | 00,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\framedyn.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - [2009-05-02 18:16:12 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2008-01-10 03:56:03 | 00,512,000 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\ati2evxx.exe -- (Ati HotKey Poller)
SRV - [2006-12-23 16:54:04 | 00,262,144 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe -- (NMIndexingService)
SRV - [2006-12-05 11:44:48 | 00,774,144 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe -- (NBService)
SRV - [2005-09-23 07:28:56 | 00,066,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2005-09-23 07:28:32 | 00,029,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state)
SRV - [2004-08-11 00:45:04 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wdfmgr.exe -- (UMWdf)
SRV - [2002-09-28 23:00:00 | 00,029,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (uploadmgr)
SRV - [2002-09-28 23:00:00 | 00,029,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - [2009-04-28 21:20:06 | 00,044,944 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20)
DRV - [2008-12-24 15:08:58 | 00,016,608 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\gdrv.sys -- (gdrv)
DRV - [2008-02-18 15:59:34 | 00,049,280 | ---- | M] (PreSonus Audio Electronics) -- C:\WINDOWS\system32\drivers\presonusUsb.sys -- (preSonusUsb)
DRV - [2008-02-18 15:53:48 | 00,028,576 | ---- | M] (PreSonus Audio Electronics) -- C:\WINDOWS\system32\drivers\PreSonusUSB_xfer.sys -- (ControlTransferDriver)
DRV - [2008-01-10 06:40:39 | 02,846,720 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2008-01-04 07:10:16 | 00,105,856 | R--- | M] (Realtek Semiconductor Corporation                           ) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007-12-20 11:00:06 | 04,637,696 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2007-05-14 02:12:00 | 03,526,464 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\drivers\RtHDMI.sys -- (RTHDMIAzAudService)
DRV - [2006-11-23 18:20:06 | 00,018,432 | ---- | M] (SIA Syncrosoft) -- C:\WINDOWS\system32\drivers\synasUSB.sys -- (SynasUSB)
DRV - [2006-09-18 15:59:08 | 00,090,800 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\se27unic.sys -- (se27unic)
DRV - [2006-09-18 15:59:02 | 00,086,560 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\SE27obex.sys -- (SE27obex)
DRV - [2006-09-18 15:59:00 | 00,018,704 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\se27nd5.sys -- (se27nd5)
DRV - [2006-09-18 15:58:58 | 00,088,688 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\SE27mgmt.sys -- (SE27mgmt)
DRV - [2006-09-18 15:58:54 | 00,097,184 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\SE27mdm.sys -- (SE27mdm)
DRV - [2006-09-18 15:58:52 | 00,009,360 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\SE27mdfl.sys -- (SE27mdfl)
DRV - [2006-09-18 15:58:48 | 00,061,600 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\SE27bus.sys -- (SE27bus)
DRV - [2005-07-07 15:26:04 | 00,055,216 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\k750bus.sys -- (k750bus)
DRV - [2005-07-07 15:26:00 | 00,006,576 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\k750mdfl.sys -- (k750mdfl)
DRV - [2005-07-07 15:25:58 | 00,089,872 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\k750mdm.sys -- (k750mdm)
DRV - [2005-07-07 15:25:52 | 00,081,728 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\k750mgmt.sys -- (k750mgmt)
DRV - [2005-07-07 15:25:50 | 00,079,488 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\k750obex.sys -- (k750obex)
DRV - [2005-01-07 17:07:18 | 00,138,752 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\system32\drivers\Hdaudbus.sys -- (HDAudBus)
DRV - [2002-09-28 23:00:00 | 00,027,440 | ---- | M] () -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)
DRV - [2002-09-28 23:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink)
DRV - [2002-08-29 00:32:32 | 00,056,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio)
DRV - [2001-04-09 03:03:56 | 00,017,784 | ---- | M] (Syncrosoft Hard- und Software GmbH) -- C:\WINDOWS\system32\drivers\NSynas32.sys -- (Nsynas32)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm


IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-842925246-1592454029-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\System32\blank.htm
IE - HKU\S-1-5-21-842925246-1592454029-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-21-842925246-1592454029-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?o=13928&l=dis
IE - HKU\S-1-5-21-842925246-1592454029-682003330-1003\S-1-5-21-842925246-1592454029-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]



FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2009-05-02 18:16:12 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.15\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009-10-30 09:39:17 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.15\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-10-28 12:30:18 | 00,000,000 | ---D | M]

[2009-03-22 20:59:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\DMN\Dane aplikacji\Mozilla\Extensions
[2009-03-22 20:59:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\DMN\Dane aplikacji\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009-06-07 19:32:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\DMN\Dane aplikacji\Mozilla\Firefox\Profiles\6vpe5c7q.default\extensions
[2009-06-07 18:39:58 | 00,000,681 | ---- | M] () -- C:\Documents and Settings\DMN\Dane aplikacji\Mozilla\Firefox\Profiles\6vpe5c7q.default\searchplugins\ask.xml
[2009-09-04 20:19:41 | 00,001,972 | ---- | M] () -- C:\Documents and Settings\DMN\Dane aplikacji\Mozilla\Firefox\Profiles\6vpe5c7q.default\searchplugins\wrzuta.xml
[2009-11-06 15:03:30 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009-10-28 12:30:18 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009-05-02 18:16:19 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
[2009-10-28 12:30:13 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browserdirprovider.dll
[2009-10-28 12:30:13 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\brwsrcmp.dll
[2009-05-02 18:16:12 | 00,410,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeploytk.dll
[2009-10-28 12:30:15 | 00,065,528 | ---- | M] (mozilla.org) -- C:\Program Files\Mozilla Firefox\plugins\npnul32.dll
[2009-02-27 11:13:42 | 00,103,792 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll
[2009-07-22 09:49:53 | 00,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2009-04-29 09:36:21 | 00,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2009-04-29 09:36:21 | 00,001,706 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\google.xml
[2009-04-29 09:36:21 | 00,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2009-04-29 09:36:21 | 00,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2009-04-29 09:36:21 | 00,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2009-04-29 09:36:21 | 00,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml

O1 HOSTS File: (742 bytes) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\DMN\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.)
O3 - HKLM\..\Toolbar: (&Radio) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx (Microsoft Corporation)
O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AlcWzrd] C:\WINDOWS\alcwzrd.exe (RealTek Semicoductor Corp.)
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [PreSonusUSBInstallApp] C:\Program Files\AudioBox USB\InstPresonusUSBDrv.exe (PreSonus Audio Electronics)
O4 - HKLM..\Run: [RTHDCPL] C:\WINDOWS\RTHDCPL.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SkyTel] C:\WINDOWS\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [Sony Ericsson PC Suite] C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe (Sony Ericsson Mobile Communications AB)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SoundMan.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKU\S-1-5-21-842925246-1592454029-682003330-1003..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKU\S-1-5-21-842925246-1592454029-682003330-1003..\Run: [MSMSGS] C:\Program Files\Messenger\MSMSGS.EXE (Microsoft Corporation)
O4 - HKU\S-1-5-21-842925246-1592454029-682003330-1003..\Run: [Nowe Gadu-Gadu] C:\Program Files\Nowe Gadu-Gadu\gg.exe (GG Network S.A.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-842925246-1592454029-682003330-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-842925246-1592454029-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-842925246-1592454029-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-842925246-1592454029-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-842925246-1592454029-682003330-1003_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra Button: @shdoclc.dll,-866 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\Web\related.htm ()
O9 - Extra 'Tools' menuitem : @shdoclc.dll,-864 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\Web\related.htm ()
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.25.200.18
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\vnd.ms.radio {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\WINDOWS\system32\msdxm.ocx (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008-12-02 20:23:58 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck) -  File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) -  File not found
O35 - comfile [open] -- "%1" %* File not found
O35 - exefile [open] -- "%1" %* File not found

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2009-11-08 18:54:15 | 00,528,896 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\DMN\Pulpit\OTL.exe
[2009-11-08 17:49:51 | 00,000,000 | RHSD | C] -- C:\cmdcons
[2009-11-08 17:43:32 | 00,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2009-11-08 17:43:32 | 00,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2009-11-08 17:43:32 | 00,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2009-11-08 17:43:32 | 00,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2009-11-08 17:43:27 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2009-11-08 17:43:27 | 00,000,000 | ---D | C] -- C:\ComboFix
[2009-11-08 17:42:58 | 00,000,000 | ---D | C] -- C:\Qoobox
[2009-11-08 17:30:48 | 00,000,000 | ---D | C] -- C:\Program Files\VS Revo Group
[2009-11-08 17:17:19 | 00,230,776 | ---- | C] (Alwil Software) -- C:\Documents and Settings\DMN\Pulpit\aswclear(3).exe
[2009-11-08 16:40:59 | 00,230,776 | ---- | C] (Alwil Software) -- C:\Documents and Settings\DMN\Pulpit\aswclear(2).exe
[2009-11-08 15:45:34 | 00,230,776 | ---- | C] (Alwil Software) -- C:\Documents and Settings\DMN\Pulpit\aswclear.exe
[2009-11-08 15:34:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\DMN\Dane aplikacji\Malwarebytes
[2009-11-08 15:34:04 | 00,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009-11-08 15:34:03 | 00,018,520 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2009-11-08 15:34:03 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2009-11-08 15:34:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
[2009-11-08 15:30:36 | 04,045,528 | ---- | C] (Malwarebytes Corporation                                    ) -- C:\Documents and Settings\DMN\Pulpit\mbam-setup.exe
[2009-11-06 23:29:24 | 00,000,000 | ---D | C] -- C:\Program Files\Nowe Gadu-Gadu
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2009-11-08 18:52:24 | 00,528,896 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\DMN\Pulpit\OTL.exe
[2009-11-08 18:37:05 | 01,012,668 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009-11-08 18:37:05 | 00,457,678 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2009-11-08 18:37:05 | 00,401,064 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009-11-08 18:37:05 | 00,079,188 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2009-11-08 18:37:05 | 00,062,344 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2009-11-08 18:35:53 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009-11-08 18:35:52 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009-11-08 17:54:07 | 00,000,269 | ---- | M] () -- C:\WINDOWS\system.ini
[2009-11-08 17:49:54 | 00,000,264 | RHS- | M] () -- C:\boot.ini
[2009-11-08 17:42:20 | 03,562,721 | R--- | M] () -- C:\Documents and Settings\DMN\Pulpit\ComboFix.exe
[2009-11-08 17:37:31 | 04,456,448 | -H-- | M] () -- C:\Documents and Settings\DMN\NTUSER.DAT
[2009-11-08 17:37:25 | 00,000,190 | -HS- | M] () -- C:\Documents and Settings\DMN\ntuser.ini
[2009-11-08 17:36:46 | 00,002,596 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2009-11-08 17:30:48 | 00,000,917 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\Revo Uninstaller.lnk
[2009-11-08 17:20:36 | 01,079,272 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\revosetup.exe
[2009-11-08 17:16:57 | 00,230,776 | ---- | M] (Alwil Software) -- C:\Documents and Settings\DMN\Pulpit\aswclear(3).exe
[2009-11-08 16:40:56 | 00,230,776 | ---- | M] (Alwil Software) -- C:\Documents and Settings\DMN\Pulpit\aswclear(2).exe
[2009-11-08 15:45:34 | 00,230,776 | ---- | M] (Alwil Software) -- C:\Documents and Settings\DMN\Pulpit\aswclear.exe
[2009-11-08 15:34:06 | 00,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk
[2009-11-08 15:31:33 | 04,045,528 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Documents and Settings\DMN\Pulpit\mbam-setup.exe
[2009-11-08 15:12:01 | 00,001,128 | ---- | M] () -- C:\WINDOWS\winamp.ini
[2009-11-08 03:34:51 | 00,976,578 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\200911061736.jpg
[2009-11-08 03:34:48 | 00,866,542 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\200911061735.jpg
[2009-11-08 03:34:46 | 00,902,003 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\200911061734.jpg
[2009-11-08 03:34:30 | 00,883,888 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\200911061733.jpg
[2009-11-08 03:34:26 | 01,232,119 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\200911061732.jpg
[2009-11-08 03:34:23 | 01,048,514 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\200911061731.jpg
[2009-11-07 22:44:33 | 00,000,091 | ---- | M] () -- C:\Documents and Settings\DMN\default.pls
[2009-11-06 23:29:46 | 00,000,717 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\OpenFM.lnk
[2009-11-06 23:29:46 | 00,000,688 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Nowe Gadu-Gadu.lnk
[2009-11-06 10:53:52 | 00,267,264 | ---- | M] () -- C:\WINDOWS\PEV.exe
[2009-11-05 20:33:50 | 04,477,901 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\12568117858199-12569853071724.mp3
[2009-11-02 15:54:15 | 04,161,651 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\mlody m - logika betonu feat. pih i fabuERSION.mp3
[2009-10-30 16:40:37 | 03,744,109 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\13 chada- co by sie nie dzialo (goscinnie fu_%0E9.mp3
[2009-10-28 23:58:25 | 03,043,610 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\pyskaty - na bacznos_pG.mp3
[2009-10-28 23:53:34 | 03,036,087 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\pyskaty - 100%.mp3
[2009-10-28 23:53:05 | 03,999,065 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\pyskaty - postaw na mnie feat. aeroe.mp3
[2009-10-27 09:56:50 | 00,043,008 | ---- | M] () -- C:\Documents and Settings\DMN\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-10-25 06:11:34 | 00,077,312 | ---- | M] () -- C:\WINDOWS\MBR.exe
[2009-10-24 16:03:32 | 00,440,550 | ---- | M] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241678.jpg
[2009-10-23 23:08:30 | 00,381,378 | ---- | M] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241693.jpg
[2009-10-23 23:08:08 | 00,384,993 | ---- | M] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241692.jpg
[2009-10-23 23:03:18 | 00,410,606 | ---- | M] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241691.jpg
[2009-10-23 22:54:50 | 00,403,678 | ---- | M] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241690.jpg
[2009-10-23 22:54:02 | 00,386,195 | ---- | M] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241689.jpg
[2009-10-23 22:53:32 | 00,388,317 | ---- | M] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241688.jpg
[2009-10-23 22:52:54 | 00,340,886 | ---- | M] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241687.jpg
[2009-10-23 22:52:38 | 00,289,011 | ---- | M] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241686.jpg
[2009-10-23 22:52:14 | 00,403,532 | ---- | M] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241685.jpg
[2009-10-23 22:51:56 | 00,329,610 | ---- | M] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241684.jpg
[2009-10-23 22:51:24 | 00,414,619 | ---- | M] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241683.jpg
[2009-10-23 22:51:04 | 00,321,181 | ---- | M] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241682.jpg
[2009-10-23 22:50:42 | 00,292,270 | ---- | M] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241681.jpg
[2009-10-23 22:50:24 | 00,335,409 | ---- | M] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241680.jpg
[2009-10-23 22:49:30 | 00,407,720 | ---- | M] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241679.jpg
[2009-10-23 22:49:04 | 00,349,422 | ---- | M] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241677.jpg
[2009-10-22 09:40:22 | 03,681,415 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\04 chada - podnosze siea282f%19.mp3
[2009-10-22 09:36:01 | 03,487,065 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\08 chada - to miasto tym zyje.mp3
[2009-10-22 09:15:45 | 02,926,999 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\10 chada - ten styl (goscinnie gabi).mp3
[2009-10-20 23:40:45 | 00,000,700 | ---- | M] () -- C:\WINDOWS\win.ini
[2009-10-16 11:06:29 | 03,659,264 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\pyskaty - oszukac przeznaczenie.mp3
[2009-10-16 10:57:47 | 03,457,390 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\pyskaty - brudne mysli feat. ero.mp3
[2009-10-11 21:33:04 | 01,007,282 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\bite boxy samplami ema.mp3
[2009-10-11 20:23:06 | 01,021,074 | ---- | M] () -- C:\Documents and Settings\DMN\Pulpit\PIC BOX + sampel.mp3
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2009-11-08 17:49:54 | 00,000,194 | ---- | C] () -- C:\Boot.bak
[2009-11-08 17:49:51 | 00,248,048 | ---- | C] () -- C:\cmldr
[2009-11-08 17:43:32 | 00,267,264 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2009-11-08 17:43:32 | 00,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2009-11-08 17:43:32 | 00,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2009-11-08 17:43:32 | 00,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2009-11-08 17:43:32 | 00,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2009-11-08 17:40:56 | 03,562,721 | R--- | C] () -- C:\Documents and Settings\DMN\Pulpit\ComboFix.exe
[2009-11-08 17:30:48 | 00,000,917 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\Revo Uninstaller.lnk
[2009-11-08 17:20:30 | 01,079,272 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\revosetup.exe
[2009-11-08 15:34:06 | 00,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk
[2009-11-08 03:26:27 | 00,976,578 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\200911061736.jpg
[2009-11-08 03:26:14 | 01,048,514 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\200911061731.jpg
[2009-11-08 03:26:13 | 00,866,542 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\200911061735.jpg
[2009-11-08 03:26:12 | 00,902,003 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\200911061734.jpg
[2009-11-08 03:26:11 | 00,883,888 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\200911061733.jpg
[2009-11-08 03:26:09 | 01,232,119 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\200911061732.jpg
[2009-11-06 23:29:46 | 00,000,717 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\OpenFM.lnk
[2009-11-06 23:29:46 | 00,000,688 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Nowe Gadu-Gadu.lnk
[2009-11-05 20:33:33 | 04,477,901 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\12568117858199-12569853071724.mp3
[2009-11-03 18:08:34 | 01,667,724 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\IMG_2135.JPG
[2009-11-03 18:08:26 | 03,037,620 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\IMG_2031.JPG
[2009-11-02 15:50:47 | 04,161,651 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\mlody m - logika betonu feat. pih i fabuERSION.mp3
[2009-10-30 16:37:23 | 03,744,109 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\13 chada- co by sie nie dzialo (goscinnie fu_%0E9.mp3
[2009-10-28 23:55:53 | 03,043,610 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\pyskaty - na bacznos_pG.mp3
[2009-10-28 23:53:35 | 03,036,087 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\pyskaty - 100%.mp3
[2009-10-28 23:53:07 | 03,999,065 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\pyskaty - postaw na mnie feat. aeroe.mp3
[2009-10-27 09:58:30 | 00,384,993 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241692.jpg
[2009-10-27 09:58:30 | 00,381,378 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241693.jpg
[2009-10-27 09:58:29 | 00,410,606 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241691.jpg
[2009-10-27 09:58:29 | 00,403,678 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241690.jpg
[2009-10-27 09:58:28 | 00,388,317 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241688.jpg
[2009-10-27 09:58:28 | 00,386,195 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241689.jpg
[2009-10-27 09:58:28 | 00,340,886 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241687.jpg
[2009-10-27 09:58:27 | 00,403,532 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241685.jpg
[2009-10-27 09:58:27 | 00,329,610 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241684.jpg
[2009-10-27 09:58:27 | 00,289,011 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241686.jpg
[2009-10-27 09:58:26 | 00,414,619 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241683.jpg
[2009-10-27 09:58:26 | 00,321,181 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241682.jpg
[2009-10-27 09:58:26 | 00,292,270 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241681.jpg
[2009-10-27 09:58:25 | 00,407,720 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241679.jpg
[2009-10-27 09:58:25 | 00,335,409 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241680.jpg
[2009-10-27 09:58:24 | 00,440,550 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241678.jpg
[2009-10-27 09:58:24 | 00,349,422 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\200910241677.jpg
[2009-10-23 07:48:23 | 00,293,795 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\20090522400.jpg
[2009-10-23 07:48:03 | 00,368,063 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\200909221294-001.jpg
[2009-10-23 07:48:00 | 00,489,325 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\DSC00023.JPG
[2009-10-23 07:47:59 | 00,087,181 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\morrrro  paint   dwa-001.jpg
[2009-10-22 09:37:19 | 03,681,415 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\04 chada - podnosze siea282f%19.mp3
[2009-10-22 09:33:06 | 03,487,065 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\08 chada - to miasto tym zyje.mp3
[2009-10-22 09:31:41 | 02,926,999 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\10 chada - ten styl (goscinnie gabi).mp3
[2009-10-16 11:03:27 | 03,659,264 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\pyskaty - oszukac przeznaczenie.mp3
[2009-10-16 10:54:56 | 03,457,390 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\pyskaty - brudne mysli feat. ero.mp3
[2009-10-11 23:43:26 | 00,023,658 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\IMG_2130.JPG
[2009-10-11 23:42:26 | 01,891,495 | ---- | C] () -- C:\Documents and Settings\DMN\Moje dokumenty\IMG_2117.JPG
[2009-10-11 21:35:16 | 01,007,282 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\bite boxy samplami ema.mp3
[2009-10-11 20:32:22 | 01,021,074 | ---- | C] () -- C:\Documents and Settings\DMN\Pulpit\PIC BOX + sampel.mp3
[2009-06-06 14:17:21 | 00,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009-05-19 21:22:59 | 00,000,772 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2009-05-02 09:19:33 | 00,001,128 | ---- | C] () -- C:\WINDOWS\winamp.ini
[2009-04-04 11:08:58 | 00,151,056 | ---- | C] () -- C:\WINDOWS\System32\IR32.DLL
[2009-04-04 11:08:58 | 00,077,664 | ---- | C] () -- C:\WINDOWS\System32\IR21.DLL
[2009-04-04 11:08:58 | 00,050,016 | ---- | C] () -- C:\WINDOWS\System32\IYVU9.DLL
[2009-04-04 11:08:58 | 00,018,384 | ---- | C] () -- C:\WINDOWS\System32\DCISVGA.DRV
[2009-01-09 21:52:47 | 00,000,034 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2008-12-18 22:23:07 | 00,000,000 | ---- | C] () -- C:\WINDOWS\mngui.INI
[2008-12-18 22:21:02 | 00,014,448 | ---- | C] () -- C:\Documents and Settings\DMN\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2008-12-18 22:12:27 | 00,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2008-12-09 23:53:24 | 00,043,008 | ---- | C] () -- C:\Documents and Settings\DMN\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-12-09 23:07:56 | 00,000,128 | ---- | C] () -- C:\Documents and Settings\DMN\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2008-12-08 16:53:35 | 00,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2008-12-08 16:53:35 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2008-12-07 23:42:34 | 00,120,200 | ---- | C] () -- C:\WINDOWS\System32\DLLDEV32i.dll
[2008-12-07 23:42:10 | 00,005,937 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini
[2008-12-02 21:48:57 | 00,905,290 | ---- | C] () -- C:\WINDOWS\System32\libmmd.dll
[2008-12-02 20:34:44 | 03,173,344 | -H-- | C] () -- C:\Documents and Settings\DMN\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2008-12-02 20:31:26 | 00,002,892 | ---- | C] () -- C:\WINDOWS\System32\audcon.sys
[2008-12-02 20:27:20 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\DMN\Dane aplikacji\desktop.ini
[2008-12-02 20:16:19 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\desktop.ini
[2002-09-28 23:00:00 | 00,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys
[2002-09-28 23:00:00 | 00,000,700 | ---- | C] () -- C:\WINDOWS\win.ini
[2002-09-28 23:00:00 | 00,000,269 | ---- | C] () -- C:\WINDOWS\system.ini

[color=#E56717]========== LOP Check ==========[/color]

[2009-07-13 23:44:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AlawarWrapper
[2008-12-24 15:05:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ATI
[2009-01-09 22:03:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Easy CD-DA Extractor
[2009-09-10 01:29:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2009-04-28 16:01:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Pinnacle
[2008-12-02 20:31:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Syncrosoft
[2008-12-18 22:12:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Teleca
[2009-05-13 09:10:45 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2008-12-24 15:05:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\DMN\Dane aplikacji\ATI
[2009-06-06 14:12:55 | 00,000,000 | ---D | M] -- C:\Documents and Settings\DMN\Dane aplikacji\Audacity
[2008-12-08 16:50:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\DMN\Dane aplikacji\BESTplayer
[2009-01-09 21:55:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\DMN\Dane aplikacji\BonkEnc
[2009-09-14 05:19:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\DMN\Dane aplikacji\Deckadance
[2008-12-09 23:25:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\DMN\Dane aplikacji\Leadertech
[2009-11-08 13:17:18 | 00,000,000 | ---D | M] -- C:\Documents and Settings\DMN\Dane aplikacji\Nowe Gadu-Gadu
[2009-09-10 01:29:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\DMN\Dane aplikacji\OpenFM
[2009-06-06 14:08:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\DMN\Dane aplikacji\Steinberg
[2008-12-18 22:16:03 | 00,000,000 | ---D | M] -- C:\Documents and Settings\DMN\Dane aplikacji\Teleca
[2009-01-29 12:53:37 | 00,000,000 | ---D | M] -- C:\Documents and Settings\DMN\Dane aplikacji\Thinstall
[2009-01-09 21:51:48 | 00,000,000 | ---D | M] -- C:\Documents and Settings\DMN\Dane aplikacji\Toolbars
[2009-06-07 23:23:28 | 00,000,000 | ---D | M] -- C:\Documents and Settings\DMN\Dane aplikacji\uTorrent
[2002-09-28 23:00:00 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini
[2009-11-08 18:35:53 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT

[color=#E56717]========== Purity Check ==========[/color]

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:0D5573C6
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:DD4DD9B9
@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:289A69FA
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:76002008
< End of report >

i drugi raport:
http://wklej.org/id/199331/

Wcześniej wykonałem skan gruntowny Malwarebytes Anti-Malware i usunęło 5 infekcji.

[NieWiem]

Wcześniej wykonałem skan gruntowny Malwarebytes Anti-Malware i usunęło 5 infekcji.

dmn21,

• oczywiście nei omieszkałeś użyć zlotego środka, jakim jest ComboFix, prawda? Proszę pokazać loga z ComboFixa, tego o 17.42. I na przyszłość pamiętaj, że to nie jest program do skanowania sobie komputera tylko narzędzie do korzystania pod nadzorem kogoś obeznanego z działaniem tego programu...
• te zdjęcia w Moje dokumenty to Twoje?
• Proszę też pokazać raport ze skanowania MBAM.

[dmn21]

Fotki moje, a czy to ważne? wnosi to coś do tematu? Niestety loga z combo i malware juz nie posiadam. Moge jeszcze raz wykonać skany...
Wykonać?
Czy log z OTL jest czysty?

Dodano Dzisiaj, 21:34:
Zrobiłem nowy skan z mbam:

Kod: Zaznacz wszystko

Malwarebytes' Anti-Malware 1.41
Wersja bazy definicji: 3124
Windows 5.1.2600 Dodatek Service Pack. 1

2009-11-08 20:31:30
mbam-log-2009-11-08 (20-31-30).txt

Typ skanowania: Pełne skanowanie (C:\|D:\|E:\|)
Przeskanowane obiekty: 193097
Upłynęło: 27 minute(s), 17 second(s)

Zainfekowane procesy w pamięci: 0
Zainfekowane moduły pamięci: 0
Zainfekowane klucze rejestru: 0
Zainfekowane wartości rejestru: 0
Zainfekowane pliki rejestru: 0
Zainfekowane foldery: 0
Zainfekowane pliki: 0

Zainfekowane procesy w pamięci:
(Nie wykryto groźnych plików)

Zainfekowane moduły pamięci:
(Nie wykryto groźnych plików)

Zainfekowane klucze rejestru:
(Nie wykryto groźnych plików)

Zainfekowane wartości rejestru:
(Nie wykryto groźnych plików)

Zainfekowane pliki rejestru:
(Nie wykryto groźnych plików)

Zainfekowane foldery:
(Nie wykryto groźnych plików)

Zainfekowane pliki:
(Nie wykryto groźnych plików)

[wojtas]

system wydaje sie byc czysty ..

[dmn21]

Nadal się zawiesza mimo że czysto nod32 nic nie wykrywa, malwarebytes rowniez...
Może to wina temperatur? poniżej daje screen + konfig kompa

http://www.up.programosy.pl/foto/screeeeeen.jpg

Procesor:
AMD Athlon 64 X2 4200+ /2.2GHz, 1MB, 65W, BOX, AM2/

Płyta główna:
Gigabyte MA78GM-S2H /AMD 780G/

Pamięć RAM:
Patriot 2GB (2x1GB) PC800 CL4 LLK

Dysk twardy:
Samsung 250GB 7200rpm 8mb cache SATA-II

Nagrywarka DVD:
Pioneer DVR-115D (ivory)

Zasilacz:
CHIEFTEC GPS-350FB-101A-BULK - 350W

[wojtas]

coś duża temp i dziwne napiecia pokaż screena z zakładki czujnik z tego:

http://www.programosy.pl/program,everest-home-edition.html

[dmn21]

[wojtas]

sam nie jestem pewien czy te temperatury są ok .

Daj loga z combofixa ale zainstaluj wraz z nim konsolę odzyskiwania ( instrukcja programu )

[Mike]

1. Komputer został w środku porządnie odkurzony (także radiatory)?
2. Dotknij dłonią radiator od procesora i napisz, czy był tylko ciepły, czy może już zaczynał parzyć w dłoń.