Zrywanie polaczanie lan - logi

[Lukesh]

Prosze o sprawdzenie logow.
Problemem jest m.in zrywanie/przerywanie polaczenia/sciagania przy polaczeniu z lanem - po wifi jest wszystko ok.


http://wklej.org/id/257818/

http://wklej.org/id/257820/

Z gory dzieki

[wojtas]

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)

:Files
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Textual Content Provider
C:\Program Files\QuestService
C:\Documents and Settings\All Users\Dane aplikacji\QuestService
C:\Program Files\Textual Content Provider
C:\Program Files\Content Management Wizard
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Internet Today
C:\Program Files\Internet Today
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Customized Platform Advancer
C:\Program Files\Customized Platform Advancer
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Automated Content Enhancer
C:\Program Files\Automated Content Enhancer
C:\Program Files\Web Search Operator
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Web Search Operator
C:\Program Files\Gameztar Toolbar
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Gameztar Toolbar

:Services
quest service service

:Commands
[emptytemp]

Kliknij w Run Fix. I potwierdz reset kompa .

Następnie uruchamiasz OTL z opcją Run Scan. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia komputera

[Lukesh]

Kod: Zaznacz wszystko

All processes killed
========== OTL ==========
No active process named explorer.exe was found!
========== FILES ==========
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Textual Content Provider\1.1.0.1810\Data folder moved successfully.
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Textual Content Provider\1.1.0.1810 folder moved successfully.
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Textual Content Provider folder moved successfully.
C:\Program Files\QuestService folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\QuestService folder moved successfully.
C:\Program Files\Textual Content Provider\1.1.0.1810\data folder moved successfully.
C:\Program Files\Textual Content Provider\1.1.0.1810 folder moved successfully.
C:\Program Files\Textual Content Provider folder moved successfully.
C:\Program Files\Content Management Wizard\1.1.0.1990 folder moved successfully.
C:\Program Files\Content Management Wizard folder moved successfully.
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Internet Today folder moved successfully.
C:\Program Files\Internet Today\1.1.0.1260 folder moved successfully.
C:\Program Files\Internet Today folder moved successfully.
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Customized Platform Advancer\4.1.0.1960 folder moved successfully.
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Customized Platform Advancer folder moved successfully.
C:\Program Files\Customized Platform Advancer\4.1.0.1960\FF\components folder moved successfully.
C:\Program Files\Customized Platform Advancer\4.1.0.1960\FF\chrome\content folder moved successfully.
C:\Program Files\Customized Platform Advancer\4.1.0.1960\FF\chrome folder moved successfully.
C:\Program Files\Customized Platform Advancer\4.1.0.1960\FF folder moved successfully.
C:\Program Files\Customized Platform Advancer\4.1.0.1960\Data folder moved successfully.
C:\Program Files\Customized Platform Advancer\4.1.0.1960 folder moved successfully.
C:\Program Files\Customized Platform Advancer folder moved successfully.
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Automated Content Enhancer\4.1.0.5290 folder moved successfully.
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Automated Content Enhancer folder moved successfully.
C:\Program Files\Automated Content Enhancer\4.1.0.5290\FF\components folder moved successfully.
C:\Program Files\Automated Content Enhancer\4.1.0.5290\FF\chrome\content folder moved successfully.
C:\Program Files\Automated Content Enhancer\4.1.0.5290\FF\chrome folder moved successfully.
C:\Program Files\Automated Content Enhancer\4.1.0.5290\FF folder moved successfully.
C:\Program Files\Automated Content Enhancer\4.1.0.5290\Data folder moved successfully.
C:\Program Files\Automated Content Enhancer\4.1.0.5290 folder moved successfully.
C:\Program Files\Automated Content Enhancer folder moved successfully.
C:\Program Files\Web Search Operator\4.1.0.2080\FF\components folder moved successfully.
C:\Program Files\Web Search Operator\4.1.0.2080\FF\chrome\content folder moved successfully.
C:\Program Files\Web Search Operator\4.1.0.2080\FF\chrome folder moved successfully.
C:\Program Files\Web Search Operator\4.1.0.2080\FF folder moved successfully.
C:\Program Files\Web Search Operator\4.1.0.2080\Data folder moved successfully.
C:\Program Files\Web Search Operator\4.1.0.2080 folder moved successfully.
C:\Program Files\Web Search Operator folder moved successfully.
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Web Search Operator\4.1.0.2080 folder moved successfully.
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Web Search Operator folder moved successfully.
C:\Program Files\Gameztar Toolbar\2.1.3.6670\Skins folder moved successfully.
C:\Program Files\Gameztar Toolbar\2.1.3.6670\Icons folder moved successfully.
C:\Program Files\Gameztar Toolbar\2.1.3.6670\Data folder moved successfully.
C:\Program Files\Gameztar Toolbar\2.1.3.6670 folder moved successfully.
C:\Program Files\Gameztar Toolbar folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\SetupArchive\FFB013D3\B94081D6 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\SetupArchive\FFB013D3 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\SetupArchive\261FDA5C\B94081D6 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\SetupArchive\261FDA5C folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\SetupArchive folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\mMSI.dll folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\mIDEWriteReg.dll folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\mIDEFunc.dll folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\mFileBagIDE.dll\bag folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\mFileBagIDE.dll folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\EB51A281\BAF4C8F5 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\EB51A281 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\DBFB33F5\BAF4C8F5 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\DBFB33F5 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\D053C9B6\BAF4C8F5 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\D053C9B6 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\A6005820\BAF4C8F5 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\A6005820 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\97A5DC7D\BAF4C8F5 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\97A5DC7D folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\93CE9E2B\B94081D6 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\93CE9E2B folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\7E6169B8\BAF4C8F5 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\7E6169B8 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\75918810\B94081D6 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\75918810 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\53CCABA1\B94081D6 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\53CCABA1 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\48C8FBD2\B94081D6 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\48C8FBD2 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\4564C64F\B94081D6 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\4564C64F folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\3A0AAFF0\B94081D6 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\3A0AAFF0 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52} folder moved successfully.
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Gameztar Toolbar\2.1.3.6670\Skins folder moved successfully.
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Gameztar Toolbar\2.1.3.6670\Icons folder moved successfully.
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Gameztar Toolbar\2.1.3.6670\Data folder moved successfully.
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Gameztar Toolbar\2.1.3.6670\Cache\Module_WebDropdown_06.png\e folder moved successfully.
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Gameztar Toolbar\2.1.3.6670\Cache\Module_WebDropdown_06.png folder moved successfully.
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Gameztar Toolbar\2.1.3.6670\Cache folder moved successfully.
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Gameztar Toolbar\2.1.3.6670\bin folder moved successfully.
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Gameztar Toolbar\2.1.3.6670 folder moved successfully.
C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Gameztar Toolbar folder moved successfully.
========== SERVICES/DRIVERS ==========
Error: No service named quest service service was found to stop!
Unable to stop service quest service service!
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32768 bytes

User: LocalService
->Temp folder emptied: 65536 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 37550 bytes

User: Wiola
->Temp folder emptied: 45339 bytes
->Temporary Internet Files folder emptied: 20902930 bytes
->Java cache emptied: 2696950 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 270336 bytes
%systemroot%\System32 .tmp files removed: 2596 bytes
Windows Temp folder emptied: 49152 bytes
RecycleBin emptied: 33857 bytes

Total Files Cleaned = 23,00 mb


OTL by OldTimer - Version 3.1.21.0 log created on 01062010_164718

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\hlktmp scheduled to be moved on reboot.

Registry entries deleted on Reboot...


Dodano 06.01.2010 17:54:19:
http://wklej.org/id/257855/

Dodano 06.01.2010 17:57:25:
Zrywa caly czas...

sciaganie, pauza... po jakims czasie znow rusza i znow pauza...

[wojtas]

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
FF - HKLM\software\mozilla\Firefox\Extensions\\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\4.1.0.2080\FF
FF - HKLM\software\mozilla\Firefox\Extensions\\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.1.0.5290\FF
FF - HKLM\software\mozilla\Firefox\Extensions\\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\4.1.0.1960\FF
O20 - Winlogon\Notify\psfus: DllName - psqlpwd.dll - File not found

:Services
QuestService Service

:Commands
[emptytemp]

Kliknij w Run Fix. I potwierdz reset kompa .

i daj loga z combofixa

[Lukesh]

Kod: Zaznacz wszystko

ComboFix 10-01-03.05 - Wiola 2010-01-04  18:02:47.1.2 - x86 MINIMAL
Microsoft Windows XP Professional  5.1.2600.2.1250.48.1045.18.1527.1284 [GMT 1:00]
Uruchomiony z: C:\Documents and Settings\Wiola\Pulpit\ComboFix.exe
AV: avast! antivirus 4.8.1296 [VPS 100104-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

UWAGA - TEN KOMPUTER NIE MA ZAINSTALOWANEJ KONSOLI ODZYSKIWANIA !!
.

(((((((((((((((((((((((((((((((((((((((   Usunięto   )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Wiola\Dane aplikacji\.#
C:\Documents and Settings\Wiola\Dane aplikacji\.#\MBX@44C@3C4198.###
C:\Documents and Settings\Wiola\Dane aplikacji\.#\MBX@44C@3C41C8.###
C:\Documents and Settings\Wiola\Dane aplikacji\.#\MBX@44C@3C41F8.###
C:\Documents and Settings\Wiola\Ustawienia lokalne\Temporary Internet Files\mvb06759.tmp
C:\Program Files\Automated Content Enhancer\4.1.0.5290\ACEIeaddon.dll
C:\Program Files\Content Management Wizard\1.1.0.1990\CMWIe.dll
C:\Program Files\Customized Platform Advancer\4.1.0.1960\CPAIeaddon.dll
C:\Program Files\Gameztar Toolbar\2.1.3.6670\mvB0.dll
C:\Program Files\Textual Content Provider\1.1.0.1810\TCPIe.dll
C:\Program Files\Web Search Operator\4.1.0.2080\wsO.dll
C:\WINDOWS\system32\ieuinit.inf
C:\WINDOWS\system32\psqlpwd.dll

.
(((((((((((((((((((((((((   Pliki utworzone od 2009-12-04 do 2010-01-04  )))))))))))))))))))))))))))))))
.

2010-01-04 16:55:03 . 2010-01-04 16:55:07   --------   d-----w-   C:\Documents and Settings\All Users\Dane aplikacji\Ad Muncher
2010-01-04 16:55:03 . 2010-01-04 16:55:04   --------   d-----w-   C:\Program Files\Ad Muncher
2009-12-20 22:36:17 . 2009-12-20 22:36:17   --------   d-----w-   C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Textual Content Provider
2009-12-20 22:33:16 . 2009-12-31 08:10:26   --------   d-----w-   C:\Program Files\QuestService
2009-12-20 22:33:16 . 2009-12-29 17:10:51   --------   d-----w-   C:\Documents and Settings\All Users\Dane aplikacji\QuestService
2009-12-20 22:32:57 . 2009-12-20 22:32:57   --------   d-----w-   C:\Program Files\Textual Content Provider
2009-12-20 22:32:47 . 2009-12-20 22:32:47   --------   d-----w-   C:\Program Files\Content Management Wizard
2009-12-20 22:32:34 . 2009-12-20 22:32:34   --------   d-----w-   C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Internet Today
2009-12-20 22:32:33 . 2009-12-20 22:32:33   --------   d-----w-   C:\Program Files\Internet Today
2009-12-20 22:32:21 . 2009-12-20 22:32:21   --------   d-----w-   C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Customized Platform Advancer
2009-12-20 22:32:20 . 2009-12-20 22:32:20   --------   d-----w-   C:\Program Files\Customized Platform Advancer
2009-12-20 22:32:01 . 2009-12-20 22:32:01   --------   d-----w-   C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Automated Content Enhancer
2009-12-20 22:32:00 . 2009-12-20 22:32:00   --------   d-----w-   C:\Program Files\Automated Content Enhancer
2009-12-20 22:31:52 . 2009-12-20 22:31:52   --------   d-----w-   C:\Program Files\Web Search Operator
2009-12-20 22:31:52 . 2009-12-20 22:31:52   --------   d-----w-   C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Web Search Operator
2009-12-20 22:31:32 . 2009-12-20 22:31:32   --------   d-----w-   C:\Program Files\Gameztar Toolbar
2009-12-20 22:31:27 . 2009-12-20 22:31:44   --------   dc-h--w-   C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}
2009-12-20 22:31:13 . 2009-12-20 22:31:13   --------   d-----w-   C:\Documents and Settings\Wiola\Ustawienia lokalne\Dane aplikacji\Gameztar Toolbar
2009-12-11 13:44:56 . 2009-12-11 13:44:57   22600376   ----a-w-   C:\Program Files\gg10.exe
2009-12-07 19:03:56 . 2009-12-29 18:07:37   --------   d-----w-   C:\Documents and Settings\Wiola\Dane aplikacji\ipla
2009-12-07 19:03:56 . 2009-12-29 18:07:25   --------   d-----w-   C:\Documents and Settings\All Users\Dane aplikacji\ipla
2009-12-07 19:03:39 . 2009-12-07 19:03:46   --------   d-----w-   C:\Program Files\ipla
2009-12-07 19:03:20 . 2009-12-07 19:03:20   1700352   ----a-w-   C:\WINDOWS\system32\gdiplus.dll
2009-12-07 19:01:21 . 2009-12-07 19:01:21   12936056   ----a-w-   C:\Program Files\iplasetup.exe

.
((((((((((((((((((((((((((((((((((((((((   Sekcja Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-25 12:39:18 . 2009-03-24 20:05:46   --------   d-----w-   C:\Documents and Settings\Wiola\Dane aplikacji\BESTplayer
2009-12-23 15:10:48 . 2009-12-29 17:10:49   58744   ----a-w-   C:\Documents and Settings\All Users\Dane aplikacji\QuestService\questservice113.exe
2009-12-21 20:51:22 . 2007-11-11 19:56:50   --------   d-----w-   C:\Program Files\Lx_cats
2009-12-20 22:32:55 . 2009-12-20 22:32:49   672314   -c--a-w-   C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\mFileBagIDE.dll\bag\TPSetup.exe
2009-12-20 22:32:44 . 2009-12-20 22:32:36   1108261   -c--a-w-   C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\mFileBagIDE.dll\bag\CMWSetup.exe
2009-12-20 22:32:32 . 2009-12-20 22:32:22   1478233   -c--a-w-   C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\mFileBagIDE.dll\bag\ITSetup.exe
2009-12-20 22:32:19 . 2009-12-20 22:32:09   834133   -c--a-w-   C:\Documents and Settings\All Users\Dane aplikacji\{0188C6A8-B559-4C1F-AA44-D0347C445C52}\OFFLINE\mFileBagIDE.dll\bag\psksetup.exe
2009-10-25 08:08:19 . 2006-04-28 09:09:17   96946   ----a-w-   C:\WINDOWS\system32\perfc015.dat
2009-10-25 08:08:19 . 2006-04-28 09:09:17   518894   ----a-w-   C:\WINDOWS\system32\perfh015.dat
2009-09-30 21:24:34 . 2009-09-30 21:24:34   4864007   ----a-w-   C:\Program Files\klcodec505b.exe
2009-03-22 21:41:16 . 2009-03-22 21:41:03   1049719   -c--a-w-   C:\Program Files\wrar361pl.exe
2007-11-05 09:37:12 . 2007-11-05 09:37:11   382352   -c--a-w-   C:\Program Files\jre-6u3-windows-i586-p-iftw.exe
2007-10-09 11:13:53 . 2007-10-09 11:13:53   4216040   -c--a-w-   C:\Program Files\NOL3Setup.exe
2007-10-09 07:48:48 . 2007-10-09 07:48:48   4346704   -c--a-w-   C:\Program Files\gg77.exe
.

(((((((((((((((((((((((((((((((((((((   Wpisy startowe rejestru   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TOSCDSPD"="C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe" [2005-04-12 10:04:18 65536]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-11-25 07:35:13 68856]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 16:24:37 1694208]
"IPLA!"="C:\Program Files\ipla\ipla.exe" [2009-12-23 16:14:30 14100888]
"VideoBarApp"="C:\Program Files\Gameztar Toolbar\2.1.3.6670\mvbapp.exe" [2009-12-17 08:07:59 712704]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 10:00:00 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ThpSrv"="c:\WINDOWS\system32\thpsrv" [X]
"CFSServ.exe"="CFSServ.exe -NoClient" [X]
"SmoothView"="C:\Program Files\TOSHIBA\Program narzędziowy TOSHIBA Zooming Utility\SmoothView.exe" [2005-05-13 09:03:16 118784]
"TouchED"="C:\Program Files\TOSHIBA\TouchED\TouchED.Exe" [2005-09-06 09:51:12 98304]
"PadTouch"="C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe" [2005-12-22 13:34:22 1077329]
"Tvs"="C:\Program Files\TOSHIBA\Tvs\TvsTray.exe" [2006-02-02 11:11:38 73728]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 17:18:51 81000]
"TPSODDCtl"="TPSODDCtl.exe" [2006-03-28 12:06:18 102400]
"TPSMain"="TPSMain.exe" [2006-03-28 12:06:14 299008]
"TosHKCW.exe"="C:\Program Files\TOSHIBA\Wireless Hotkey\TosHKCW.exe" [2005-05-17 09:42:02 49152]
"TFNF5"="TFNF5.exe" [2006-03-17 00:34:48 593920]
"TFncKy"="TFncKy.exe" [BU]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 02:25:21 144784]
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 15:11:06 925696]
"PSQLLauncher"="C:\Program Files\Protector Suite QL\launcher.exe" [2006-02-24 08:37:20 30208]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2006-01-12 15:40:44 155648]
"NDSTray.exe"="NDSTray.exe" [BU]
"lxccmon.exe"="C:\Program Files\Lexmark 3300 Series\lxccmon.exe" [2005-02-21 11:23:12 192512]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-12-05 10:37:40 667718]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-11-28 09:41:50 602182]
"igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [2005-11-28 20:55:14 98304]
"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2005-11-28 20:55:58 118784]
"igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [2005-11-28 20:52:00 77824]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-08-26 19:42:20 29744]
"FaxCenterServer"="C:\Program Files\Lexmark Fax Solutions\fm3032.exe" [2005-01-20 02:19:38 299008]
"DDWMon"="C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe" [2006-03-30 12:48:52 262144]
"Apoint"="C:\Program Files\Apoint2K\Apoint.exe" [2004-03-24 05:40:00 196608]
"AGRSMMSG"="AGRSMMSG.exe" [2005-10-15 13:29:08 88203]
"00THotkey"="C:\WINDOWS\system32\00THotkey.exe" [2006-03-29 07:02:24 253952]
"000StTHK"="000StTHK.exe" [2001-06-23 02:28:00 24576]
"LXCCCATS"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll" [2005-01-10 09:21:54 69632]
"BearShare"="C:\Program Files\BearShare\BearShare.exe" [2006-07-26 12:48:28 3305472]
"Ad Muncher"="C:\Program Files\Ad Muncher\AdMunch.exe" [2010-01-04 16:55:04 862208]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 10:00:00 15360]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2006-2-2 1753088]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Microsoft Office.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Service Manager.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Service Manager.lnk
backup=C:\WINDOWS\pss\Service Manager.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CFSServ.exe]
CFSServ.exe -NoClient [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ThpSrv]
c:\WINDOWS\system32\thpsrv [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\000StTHK]
2001-06-23 02:28:00   24576   ----a-w-   C:\WINDOWS\system32\000StTHK.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\00THotkey]
2006-03-29 07:02:24   253952   ----a-w-   C:\WINDOWS\system32\00THotkey.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGRSMMSG]
2005-10-15 13:29:08   88203   ----a-w-   C:\WINDOWS\agrsmmsg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Apoint]
2004-03-24 05:40:00   196608   -c--a-w-   C:\Program Files\Apoint2K\Apoint.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BearShare]
2006-07-26 12:48:28   3305472   ----a-w-   C:\Program Files\BearShare\BearShare.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FaxCenterServer]
2005-01-20 02:19:38   299008   ----a-w-   C:\Program Files\Lexmark Fax Solutions\fm3032.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
2008-08-26 19:42:20   29744   ----a-w-   C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxhkcmd]
2005-11-28 20:52:00   77824   ----a-w-   C:\WINDOWS\system32\hkcmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxpers]
2005-11-28 20:55:58   118784   ----a-w-   C:\WINDOWS\system32\igfxpers.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxtray]
2005-11-28 20:55:14   98304   ----a-w-   C:\WINDOWS\system32\igfxtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IPLA!]
2009-12-23 16:14:30   14100888   ----a-w-   C:\Program Files\ipla\ipla.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lxccmon.exe]
2005-02-21 11:23:12   192512   ----a-w-   C:\Program Files\Lexmark 3300 Series\lxccmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2006-01-12 15:40:44   155648   ----a-w-   C:\WINDOWS\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PSQLLauncher]
2006-02-24 08:37:20   30208   ----a-w-   C:\Program Files\Protector Suite QL\launcher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP]
2005-05-20 15:11:06   925696   -c--a-w-   C:\Program Files\Analog Devices\Core\smax4pnp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2007-11-25 07:35:13   68856   ----a-w-   C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TFNF5]
2006-03-17 00:34:48   593920   ----a-w-   C:\WINDOWS\system32\TFNF5.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TPSMain]
2006-03-28 12:06:14   299008   ----a-w-   C:\WINDOWS\system32\TPSMain.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TPSODDCtl]
2006-03-28 12:06:18   102400   ----a-w-   C:\WINDOWS\system32\TPSODDCtl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VideoBarApp]
2009-12-17 08:07:59   712704   ----a-w-   C:\Program Files\Gameztar Toolbar\2.1.3.6670\mvbapp.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\DC++\\DCPlusPlus.exe"=
"C:\\Program Files\\Gadu-Gadu\\gg.exe"=
"C:\\Program Files\\BearShare\\BearShare.exe"=