Otwieranie się dziwnych stron

**Posty:** 2 · przez **asienka8616** 23 Lut 2010, 12:32

Cześć,
mam problem z otwieraniem się jakiś dziwnych stron z grami i innymi niechcianymi rzeczami. Wszystko to dzieje się w Mozilli. Ktoś poradził mi,żebym przeskanowała dysk za pomocą OTL, z czego raport zamieszczam poniżej.

<log w poniższym poście>

**Posty:** 2183 · przez **NieWiem** 23 Lut 2010, 12:38

Cześć.

Pomożemy a pewnie, ale najpierw popraw tego loga, i weź go w tagi CODE. Wszystko znajdziesz tutaj:
zasady-wstawiania-logow-vt93842.html

A potem będą komendy usuwania

**Posty:** 2 · przez **asienka8616** 23 Lut 2010, 15:33

Dziękuję z góry i zamieszczam poprawione logi

Kod: Zaznacz wszystko: OTL logfile created on: 2010-02-23 14:25:17 - Run 2 OTL by OldTimer - Version 3.1.11.4 Folder = C:\Documents and Settings\user\Pulpit Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,99 Gb Total Physical Memory | 1,51 Gb Available Physical Memory | 75,86% Memory free 3,84 Gb Paging File | 3,41 Gb Available in Paging File | 88,79% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 32,00 Gb Total Space | 18,68 Gb Free Space | 58,37% Space Free | Partition Type: NTFS Drive D: | 200,89 Gb Total Space | 71,60 Gb Free Space | 35,64% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: USER-F54CE64558 Current User Name: user Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010-02-19 23:29:47 | 00,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-12-01 21:55:53 | 00,535,552 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\user\Pulpit\OTL.exe PRC - [2009-11-25 00:51:40 | 00,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe PRC - [2009-11-25 00:51:35 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe PRC - [2009-11-25 00:51:21 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe PRC - [2009-11-25 00:48:48 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe PRC - [2009-11-25 00:43:56 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe PRC - [2009-08-31 17:07:34 | 11,391,592 | ---- | M] (GG Network S.A.) -- C:\Program Files\Nowe Gadu-Gadu\gg.exe PRC - [2009-08-31 15:56:26 | 00,077,824 | ---- | M] () -- C:\Program Files\Nowe Gadu-Gadu\spellchecker_gg.exe PRC - [2009-02-18 18:54:15 | 00,148,888 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe PRC - [2009-02-18 18:54:14 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe PRC - [2008-10-29 20:18:15 | 02,699,334 | ---- | M] (Zinio, LLC) -- C:\Program Files\Zinio\ZinioReader.exe PRC - [2008-08-04 00:02:20 | 00,036,352 | ---- | M] () -- C:\Program Files\Winamp\winampa.exe PRC - [2008-06-03 15:40:08 | 00,177,456 | ---- | M] ( Hewlett-Packard Development Company, L.P.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe PRC - [2008-05-22 20:40:44 | 00,141,848 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\igfxtray.exe PRC - [2008-05-22 20:40:40 | 00,256,536 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\igfxsrvc.exe PRC - [2008-05-22 20:40:38 | 00,137,752 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\igfxpers.exe PRC - [2008-05-22 20:40:28 | 00,166,424 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\hkcmd.exe PRC - [2008-05-01 15:25:56 | 00,165,192 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe PRC - [2008-04-03 10:33:26 | 00,193,840 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe PRC - [2008-01-18 10:04:08 | 01,028,096 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe PRC - [2007-12-11 11:15:04 | 00,012,800 | ---- | M] (Agere Systems) -- C:\WINDOWS\system32\agrsmsvc.exe PRC - [2007-02-06 14:14:00 | 00,561,213 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe PRC - [2007-02-06 14:02:26 | 00,266,295 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe PRC - [2007-01-05 16:36:48 | 00,872,448 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\Core\smax4pnp.exe PRC - [2006-10-26 19:24:54 | 00,098,632 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE PRC - [2006-03-02 13:00:00 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2005-11-08 16:40:00 | 00,401,408 | ---- | M] (AVerMedia Technologies, Inc.) -- C:\Program Files\AVerTV USB 2.0 Lite\QuickTV.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2009-12-01 21:55:53 | 00,535,552 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\user\Pulpit\OTL.exe MOD - [2007-02-06 14:19:44 | 00,077,824 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\system32\BtMmHook.dll MOD - [2006-03-02 13:00:00 | 01,050,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2009-11-26 15:29:56 | 00,058,744 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\QuestService\questservice127.exe -- (QuestService Service) SRV - [2009-11-25 00:51:35 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus) SRV - [2009-11-25 00:51:21 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner) SRV - [2009-11-25 00:48:48 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner) SRV - [2009-11-25 00:43:56 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv) SRV - [2009-03-19 23:13:38 | 00,133,104 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdate1c9a8dff7933384) Usługa Google Update (gupdate1c9a8dff7933384) SRV - [2009-03-19 23:12:29 | 00,183,280 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc) SRV - [2009-02-18 18:54:14 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2008-05-01 15:25:56 | 00,165,192 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe -- (hpqwmiex) SRV - [2008-04-03 10:33:26 | 00,193,840 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe -- (Com4QLBEx) SRV - [2007-12-11 11:15:04 | 00,012,800 | ---- | M] (Agere Systems) -- C:\WINDOWS\system32\agrsmsvc.exe -- (AgereModemAudio) SRV - [2007-02-06 14:02:26 | 00,266,295 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe -- (btwdins) SRV - [2006-10-26 18:49:34 | 00,441,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv) SRV - [2006-10-26 12:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2009-11-25 00:50:59 | 00,094,160 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\drivers\aswmon2.sys -- (aswMon2) DRV - [2009-11-25 00:50:12 | 00,114,768 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP) DRV - [2009-11-25 00:50:00 | 00,020,560 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2009-11-25 00:49:07 | 00,048,560 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi) DRV - [2009-11-25 00:48:57 | 00,023,120 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr) DRV - [2009-11-25 00:47:54 | 00,027,408 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2008-04-28 14:22:10 | 00,009,344 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\WINDOWS\system32\drivers\CPQBttn.sys -- (HBtnKey) DRV - [2008-04-24 13:28:08 | 00,281,600 | ---- | M] (Analog Devices, Inc.) -- C:\WINDOWS\system32\drivers\ADIHdAud.sys -- (ADIHdAudAddService) DRV - [2008-03-17 20:45:50 | 05,955,872 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\drivers\igxpmp32.sys -- (ialm) DRV - [2008-03-13 02:25:36 | 02,530,176 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\drivers\NETw4x32.sys -- (NETw4x32) Sterownik karty Intel(R) DRV - [2008-02-29 15:13:38 | 01,202,560 | ---- | M] (Agere Systems) -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2008-01-18 09:49:24 | 00,220,640 | ---- | M] (Synaptics, Inc.) -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP) DRV - [2007-07-13 09:26:12 | 00,094,976 | ---- | M] (Andrea Electronics Corporation) -- C:\WINDOWS\system32\drivers\aeaudio.sys -- (AEAudio) DRV - [2007-06-18 16:12:04 | 00,016,768 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\WINDOWS\system32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV - [2007-05-10 08:19:26 | 00,828,288 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) -- C:\WINDOWS\system32\drivers\USBAVCap.sys -- (USBAVCap) DRV - [2007-04-12 13:26:08 | 00,250,776 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\drivers\e1e5132.sys -- (e1express) Intel(R) DRV - [2007-03-08 00:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20) DRV - [2007-02-14 13:21:00 | 00,067,960 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB) DRV - [2007-02-14 13:20:58 | 00,868,298 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL) DRV - [2007-02-14 13:20:58 | 00,149,123 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS) DRV - [2007-02-14 13:20:58 | 00,030,459 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver) DRV - [2007-02-14 13:20:56 | 00,530,861 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio) DRV - [2006-03-02 13:00:00 | 00,027,440 | ---- | M] () -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv) DRV - [2006-03-02 13:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink) DRV - [2005-02-15 15:44:58 | 00,185,792 | ---- | M] (AVerMedia) -- C:\WINDOWS\system32\drivers\StkMini.sys -- (StkMini) DRV - [2005-01-07 16:07:18 | 00,138,752 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\system32\drivers\Hdaudbus.sys -- (HDAudBus) DRV - [2004-11-05 17:36:00 | 00,004,106 | ---- | M] (Syntek America Inc.) -- C:\WINDOWS\system32\drivers\StkScan.sys -- (StkScan) DRV - [2004-08-03 22:10:14 | 00,015,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\MPE.sys -- (MPE) DRV - [2004-08-03 22:07:56 | 00,059,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) Sterownik audio USB (WDM) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = wyborcza.pl/0,0.html?p=019 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.myquickfinder.com IE - HKCU\..\URLSearchHook: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTog1.dll (Conduit Ltd.) IE - HKCU\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledItems: {8141440E-08F0-4339-9959-5C31C6A69F23}:4.1.0.5190 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {F2DDDB92-1605-4260-9B25-45A4DAE87B50}:1.0 FF - prefs.js..extensions.enabledItems: {E63605FC-D583-4C81-867F-9457BDB3EA1B}:3.1.0.1840 FF - HKLM\software\mozilla\Firefox\extensions\\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\3.1.0.1840\FF [2009-12-01 16:06:07 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\extensions\\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.1.0.5190\FF [2009-12-01 16:06:09 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\extensions\\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\3.1.0.1630\FF FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-02-19 23:30:00 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-02-19 23:30:00 | 00,000,000 | ---D | M] [2009-12-01 22:32:45 | 00,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Extensions [2009-12-01 22:32:45 | 00,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\fwp9x1iy.default\extensions [2010-02-22 13:10:30 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2009-12-01 16:11:25 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\{F2DDDB92-1605-4260-9B25-45A4DAE87B50} [2009-07-17 09:40:12 | 00,704,512 | ---- | M] (BitComet) -- C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll [2010-02-19 23:29:55 | 00,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2010-02-19 23:29:55 | 00,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2010-02-19 23:29:55 | 00,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2010-02-19 23:29:55 | 00,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2010-02-19 23:29:55 | 00,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2010-02-19 23:29:55 | 00,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: (742 bytes) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (ToggleEN Toolbar) - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTog1.dll (Conduit Ltd.) O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Automated Content Enhancer) - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5190\ACEIEAddOn.dll () O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.) O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet) O2 - BHO: (Customized Platform Advancer) - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - C:\Program Files\Customized Platform Advancer\3.1.0.1630\CPAIEAddOn.dll File not found O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.) O2 - BHO: (Content Management Wizard) - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.1.0.1870\CMWIE.dll File not found O2 - BHO: (TCP) - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.1.0.1610\TCPIE.dll () O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O2 - BHO: (Web Search Operator) - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\3.1.0.1840\WSO.dll () O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\user\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.) O3 - HKLM\..\Toolbar: (ToggleEN Toolbar) - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTog1.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.) O3 - HKCU\..\Toolbar\WebBrowser: (ToggleEN Toolbar) - {038CB5C7-48EA-4AF9-94E0-A1646542E62B} - C:\Program Files\ToggleEN\tbTog1.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.) O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software) O4 - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe (Intel Corporation) O4 - HKLM..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe (Intel Corporation) O4 - HKLM..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe (Intel Corporation) O4 - HKLM..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe ( Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe (Apple Inc.) O4 - HKLM..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe (Analog Devices, Inc.) O4 - HKLM..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.) O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe () O4 - HKCU..\Run: [Nowe Gadu-Gadu] C:\Program Files\Nowe Gadu-Gadu\gg.exe (GG Network S.A.) O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O4 - HKCU..\Run: [Zinio DLM] C:\Program Files\Zinio\ZinioReader.exe (Zinio, LLC) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BTTray.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\NewShortcut1.lnk = C:\Program Files\AVerTV USB 2.0 Lite\QuickTV.exe (AVerMedia Technologies, Inc.) O4 - Startup: C:\Documents and Settings\user\Menu Start\Programy\Autostart\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html () O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Pobierz wszystkie VIdeo za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Pobierz za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Wyślij do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab (Java Plug-in 1.6.0_12) O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab (Java Plug-in 1.6.0_12) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab (Java Plug-in 1.6.0_12) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.182.56.181 O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008-09-25 14:03:20 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{2d4bf496-96c7-11dd-83a3-002186671870}\Shell\AutoRun\command - "" = F:\SYSTEM\S-1-5-21-1482476501-1644491937-682003330-1013\system32.exe -- File not found O33 - MountPoints2\{2d4bf496-96c7-11dd-83a3-002186671870}\Shell\open\command - "" = F:\SYSTEM\S-1-5-21-1482476501-1644491937-682003330-1013\system32.exe -- File not found O33 - MountPoints2\{54d8dc24-ddd2-11de-86ec-001f3c87429b}\Shell - "" = AutoRun O33 - MountPoints2\{6998dba6-a0fb-11dd-83cf-002186671870}\Shell\Auto\command - "" = activexdebugger32.exe f O33 - MountPoints2\{6998dba6-a0fb-11dd-83cf-002186671870}\Shell\explore\Command - "" = activexdebugger32.exe f O33 - MountPoints2\{6998dba6-a0fb-11dd-83cf-002186671870}\Shell\open\Command - "" = activexdebugger32.exe f O33 - MountPoints2\{8f4a92b4-e67d-11dd-8499-001f3c87429b}\Shell\AutoRun\command - "" = TAJO/selma.exe O33 - MountPoints2\{8f4a92b4-e67d-11dd-8499-001f3c87429b}\Shell\explore\command - "" = TAJO/selma.exe O33 - MountPoints2\{8f4a92b4-e67d-11dd-8499-001f3c87429b}\Shell\open\command - "" = TAJO/selma.exe O33 - MountPoints2\{abca675e-17df-11df-8788-001f3c87429b}\Shell\AutoRun\command - "" = F:\ws.exe -- File not found O33 - MountPoints2\{abca675e-17df-11df-8788-001f3c87429b}\Shell\open\Command - "" = F:\ws.exe -- File not found O33 - MountPoints2\{e1effc2a-d6a0-11de-86db-001f3c87429b}\Shell - "" = AutoRun O33 - MountPoints2\{fdf0872a-922f-11dd-8392-002186671870}\Shell - "" = Autorun O33 - MountPoints2\{fdf0872a-922f-11dd-8392-002186671870}\Shell\AutoRun\command - "" = C:\WINDOWS\System32\setup.exe -- [2006-03-02 13:00:00 | 00,023,040 | ---- | M] (Microsoft Corporation) O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (*) - File not found O35 - comfile [open] -- "%1" %* O35 - exefile [open] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010-02-22 18:54:30 | 00,000,000 | ---D | C] -- C:\Documents and Settings\user\Pulpit\Zwierzaki [2010-02-22 18:54:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\user\Pulpit\inne odgłosy [2009-02-18 18:52:36 | 00,607,640 | ---- | C] (Sun Microsystems, Inc.) -- C:\Program Files\jxpiinstall-6u12-fcs-bin-b04-windows-i586-17_jan_2009.exe [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010-02-23 14:25:03 | 00,005,561 | ---- | M] () -- C:\WINDOWS\avertv.ini [2010-02-23 14:17:00 | 00,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2010-02-23 14:04:25 | 00,002,422 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010-02-23 14:04:25 | 00,000,972 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job [2010-02-23 14:03:42 | 00,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2010-02-23 14:03:40 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010-02-23 14:03:35 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010-02-23 11:44:39 | 05,242,880 | -H-- | M] () -- C:\Documents and Settings\user\NTUSER.DAT [2010-02-23 11:44:39 | 00,000,188 | -HS- | M] () -- C:\Documents and Settings\user\ntuser.ini [2010-02-22 23:28:10 | 00,014,756 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\postępowanie.docx [2010-02-22 20:26:45 | 05,030,076 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\VI Rozumienie nazw w tekstach mówionych i pisanych.docx [2010-02-22 20:26:37 | 07,180,800 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Diagnozowanie zaburzeń afatycznych- KWESTIONARIUSZ.ppt [2010-02-22 19:09:30 | 00,098,816 | ---- | M] () -- C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-02-22 18:08:46 | 00,559,104 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\TWORZENIE TEKSTOW PISANYCH.doc [2010-02-22 18:07:54 | 00,012,604 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\ROZPOZNAWANIE BLEDOW FONETYCZNYCH.docx [2010-02-22 18:07:04 | 00,044,731 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\ORIENTACJA.docx [2010-02-22 18:06:10 | 00,012,631 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\LICZENIE DO WYDRUKU.docx [2010-02-22 18:05:36 | 01,673,177 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\PAMIEC.docx [2010-02-22 13:48:02 | 01,375,232 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\NAZYWANIE.doc [2010-02-22 01:02:58 | 00,049,664 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\S5.09-10..lato.doc [2010-02-20 11:07:03 | 00,763,990 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010-02-20 11:07:03 | 00,356,068 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2010-02-20 11:07:03 | 00,311,938 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010-02-20 11:07:03 | 00,049,910 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2010-02-20 11:07:03 | 00,040,326 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010-02-20 00:05:49 | 00,000,004 | ---- | M] () -- C:\napis.zip [2010-02-19 11:03:41 | 07,843,227 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\kwest, Dziedzic Judyta i Glazowska Karolina.rar [2010-02-19 11:01:26 | 05,104,128 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\VI Rozumienie nazw w tekstach mówionych i pisanych.doc [2010-02-17 18:35:18 | 00,053,248 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Każda epoka wnosi ze sobą nowe ideały i wzorce postaw.doc [2010-02-17 08:16:29 | 08,385,024 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\kwest, Dziedzic Judyta i Głazowska Karolina.ppt [2010-02-16 22:36:48 | 00,000,400 | ---- | M] () -- C:\Documents and Settings\user\Moje dokumenty\spider.sav [2010-02-16 16:21:37 | 00,040,960 | -H-- | M] () -- C:\Documents and Settings\user\Pulpit\photothumb.db [2010-02-14 18:17:40 | 00,001,813 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk [2010-02-11 23:55:15 | 00,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2010-02-11 17:15:17 | 03,428,352 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Kwestionariusz-DIAGNOZOWANIE ZABURZEN AFATYCZNYCH.ppt [2010-02-04 22:19:22 | 00,001,915 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Google Earth.lnk [2010-02-04 15:38:15 | 00,034,816 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\plan Ani.xls [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-02-22 23:28:10 | 00,014,756 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\postępowanie.docx [2010-02-22 20:26:35 | 07,180,800 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Diagnozowanie zaburzeń afatycznych- KWESTIONARIUSZ.ppt [2010-02-22 18:18:52 | 00,559,104 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\TWORZENIE TEKSTOW PISANYCH.doc [2010-02-22 18:18:42 | 01,375,232 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\NAZYWANIE.doc [2010-02-22 18:18:08 | 01,673,177 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\PAMIEC.docx [2010-02-22 18:18:05 | 00,012,631 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\LICZENIE DO WYDRUKU.docx [2010-02-22 18:18:01 | 00,044,731 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\ORIENTACJA.docx [2010-02-22 18:17:56 | 00,012,604 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\ROZPOZNAWANIE BLEDOW FONETYCZNYCH.docx [2010-02-20 02:40:33 | 08,385,024 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\kwest, Dziedzic Judyta i Głazowska Karolina.ppt [2010-02-19 11:03:33 | 07,843,227 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\kwest, Dziedzic Judyta i Glazowska Karolina.rar [2010-02-19 11:01:25 | 05,104,128 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\VI Rozumienie nazw w tekstach mówionych i pisanych.doc [2010-02-16 17:47:15 | 00,053,248 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Każda epoka wnosi ze sobą nowe ideały i wzorce postaw.doc [2010-02-11 19:04:32 | 05,030,076 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\VI Rozumienie nazw w tekstach mówionych i pisanych.docx [2010-02-11 17:15:16 | 03,428,352 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Kwestionariusz-DIAGNOZOWANIE ZABURZEN AFATYCZNYCH.ppt [2010-02-04 22:19:22 | 00,001,915 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Google Earth.lnk [2010-02-04 15:38:14 | 00,034,816 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\plan Ani.xls [2010-02-04 11:32:12 | 00,049,664 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\S5.09-10..lato.doc [2009-02-23 22:11:55 | 00,057,344 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-02-23 22:11:55 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2009-02-23 22:03:22 | 04,608,877 | ---- | C] () -- C:\Program Files\zp600pro.exe [2008-11-21 08:47:07 | 00,005,632 | ---- | C] () -- C:\WINDOWS\System32\CNMVS47.DLL [2008-10-05 10:50:13 | 00,098,816 | ---- | C] () -- C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008-10-04 20:48:39 | 00,000,133 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2008-10-04 17:21:29 | 00,001,125 | ---- | C] () -- C:\WINDOWS\winamp.ini [2008-09-30 16:41:21 | 00,363,520 | ---- | C] () -- C:\WINDOWS\System32\PsisDecd.dll [2008-09-25 14:51:02 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\QSwitch.txt [2008-09-25 14:51:02 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\DSwitch.txt [2008-09-25 14:51:02 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\AtStart.txt [2008-09-25 14:20:01 | 00,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4935.dll [2007-02-06 14:20:00 | 02,842,624 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll [2007-02-06 13:55:52 | 00,090,112 | ---- | C] () -- C:\WINDOWS\System32\btprn2k.dll [2006-03-02 13:00:00 | 00,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys [2005-03-10 19:42:24 | 00,005,561 | ---- | C] () -- C:\WINDOWS\avertv.ini [2005-02-17 10:41:32 | 00,000,603 | ---- | C] () -- C:\WINDOWS\System32\BTNeighborhood.dll.manifest [2005-02-17 10:41:30 | 00,000,593 | ---- | C] () -- C:\WINDOWS\System32\btcss.dll.manifest [2004-11-05 18:38:00 | 00,024,576 | ---- | C] () -- C:\WINDOWS\System32\StkCoIn.dll [2001-11-14 11:56:00 | 01,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll < End of report >

**Posty:** 18165 · przez **wojtas** 23 Lut 2010, 18:58

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.myquickfinder.com
IE - HKCU\..\URLSearchHook: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTog1.dll (Conduit Ltd.)
FF - prefs.js..extensions.enabledItems: {8141440E-08F0-4339-9959-5C31C6A69F23}:4.1.0.5190
FF - prefs.js..extensions.enabledItems: {F2DDDB92-1605-4260-9B25-45A4DAE87B50}:1.0
FF - prefs.js..extensions.enabledItems: {E63605FC-D583-4C81-867F-9457BDB3EA1B}:3.1.0.1840
FF - HKLM\software\mozilla\Firefox\extensions\\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\3.1.0.1840\FF [2009-12-01 16:06:07 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.1.0.5190\FF [2009-12-01 16:06:09 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\3.1.0.1630\FF
O2 - BHO: (Automated Content Enhancer) - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5190\ACEIEAddOn.dll ()
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O2 - BHO: (Customized Platform Advancer) - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - C:\Program Files\Customized Platform Advancer\3.1.0.1630\CPAIEAddOn.dll File not found
O2 - BHO: (Content Management Wizard) - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.1.0.1870\CMWIE.dll File not found
O2 - BHO: (TCP) - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.1.0.1610\TCPIE.dll ()
O2 - BHO: (Web Search Operator) - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\3.1.0.1840\WSO.dll ()
O3 - HKLM\..\Toolbar: (ToggleEN Toolbar) - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTog1.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKCU\..\Toolbar\WebBrowser: (ToggleEN Toolbar) - {038CB5C7-48EA-4AF9-94E0-A1646542E62B} - C:\Program Files\ToggleEN\tbTog1.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O33 - MountPoints2\{2d4bf496-96c7-11dd-83a3-002186671870}\Shell\AutoRun\command - "" = F:\SYSTEM\S-1-5-21-1482476501-1644491937-682003330-1013\system32.exe -- File not found
O33 - MountPoints2\{2d4bf496-96c7-11dd-83a3-002186671870}\Shell\open\command - "" = F:\SYSTEM\S-1-5-21-1482476501-1644491937-682003330-1013\system32.exe -- File not found
O33 - MountPoints2\{54d8dc24-ddd2-11de-86ec-001f3c87429b}\Shell - "" = AutoRun
O33 - MountPoints2\{6998dba6-a0fb-11dd-83cf-002186671870}\Shell\Auto\command - "" = activexdebugger32.exe f
O33 - MountPoints2\{6998dba6-a0fb-11dd-83cf-002186671870}\Shell\explore\Command - "" = activexdebugger32.exe f
O33 - MountPoints2\{6998dba6-a0fb-11dd-83cf-002186671870}\Shell\open\Command - "" = activexdebugger32.exe f
O33 - MountPoints2\{8f4a92b4-e67d-11dd-8499-001f3c87429b}\Shell\AutoRun\command - "" = TAJO/selma.exe
O33 - MountPoints2\{8f4a92b4-e67d-11dd-8499-001f3c87429b}\Shell\explore\command - "" = TAJO/selma.exe
O33 - MountPoints2\{8f4a92b4-e67d-11dd-8499-001f3c87429b}\Shell\open\command - "" = TAJO/selma.exe
O33 - MountPoints2\{abca675e-17df-11df-8788-001f3c87429b}\Shell\AutoRun\command - "" = F:\ws.exe -- File not found
O33 - MountPoints2\{abca675e-17df-11df-8788-001f3c87429b}\Shell\open\Command - "" = F:\ws.exe -- File not found
O33 - MountPoints2\{e1effc2a-d6a0-11de-86db-001f3c87429b}\Shell - "" = AutoRun
O33 - MountPoints2\{fdf0872a-922f-11dd-8392-002186671870}\Shell - "" = Autorun
O33 - MountPoints2\{fdf0872a-922f-11dd-8392-002186671870}\Shell\AutoRun\command - "" = C:\WINDOWS\System32\setup.exe -- [2006-03-02 13:00:00 | 00,023,040 | ---- | M] (Microsoft Corporation)

:Files
C:\Program Files\Winamp Toolbar
C:\Program Files\Customized Platform Advancer
C:\Program Files\Automated Content Enhancer
C:\Program Files\QuestService
C:\Program Files\Web Search Operator
C:\Documents and Settings\All Users\Dane aplikacji\QuestService

:Services
QuestService Service

:Commands
[emptytemp]

Kliknij w Run Fix. I potwierdz reset kompa .

Następnie uruchamiasz OTL z opcją Run Scan. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia komputera