Zamulony laptop

**Posty:** 72 · przez **17rafal** 04 Lip 2010, 20:23

Witam, od jakiegoś czasu laptop jest strasznie powolny, często wyskakuje brak pamięci wirtualnej, wlacza, wylacza sie bardzo dlugo, internet wolno chodzi, programy uruchamiaja sie dopiero po jakims czasie.
Daje logi, jezeli cos bedzie jeszcze potrzebne to wrzuce.

http://www.wklej.org/id/360316/

gmer

Kod: Zaznacz wszystko: GMER 1.0.15.15281 - http://www.gmer.net Rootkit scan 2010-07-04 19:53:43 Windows 5.1.2600 Dodatek Service Pack 3 Running: kh6vek1p.exe; Driver: C:\DOCUME~1\BASIEŃKA\USTAWI~1\Temp\pxxoqkow.sys ---- System - GMER 1.0.15 ---- SSDT spzh.sys ZwCreateKey [0xF84320E0] SSDT spzh.sys ZwEnumerateKey [0xF844ADA4] SSDT spzh.sys ZwEnumerateValueKey [0xF844B132] SSDT spzh.sys ZwOpenKey [0xF84320C0] SSDT spzh.sys ZwQueryKey [0xF844B20A] SSDT spzh.sys ZwQueryValueKey [0xF844B08A] SSDT spzh.sys ZwSetValueKey [0xF844B29C] INT 0x62 ? 82DDEBF8 INT 0x74 ? 82AA4F00 INT 0x82 ? 82DDEBF8 INT 0x84 ? 82AA4F00 INT 0x94 ? 82AA4F00 INT 0xA4 ? 82AA4F00 ---- Kernel code sections - GMER 1.0.15 ---- ? spzh.sys Nie można odnaleźć określonego pliku. ! .text C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xF7F04360, 0x20328D, 0xE8000020] .text USBPORT.SYS!DllUnload F78FF8AC 5 Bytes JMP 82AA44E0 ---- Kernel IAT/EAT - GMER 1.0.15 ---- IAT atapi.sys[HAL.dll!READ_PORT_UCHAR] [F8433042] spzh.sys IAT atapi.sys[HAL.dll!READ_PORT_BUFFER_USHORT] [F843313E] spzh.sys IAT atapi.sys[HAL.dll!READ_PORT_USHORT] [F84330C0] spzh.sys IAT atapi.sys[HAL.dll!WRITE_PORT_BUFFER_USHORT] [F8433800] spzh.sys IAT atapi.sys[HAL.dll!WRITE_PORT_UCHAR] [F84336D6] spzh.sys IAT \SystemRoot\system32\DRIVERS\i8042prt.sys[HAL.dll!READ_PORT_UCHAR] [F8442B90] spzh.sys ---- Devices - GMER 1.0.15 ---- Device 82DDD1F8 Device Fastfat.sys (Fast FAT File System Driver/Microsoft Corporation) Device \Driver\USBSTOR \Device\0000008e 82B52500 Device \Driver\NetBT \Device\NetBT_Tcpip_{026232C5-5A99-4A04-BB66-67C51CAF6BE7} 82ADD500 AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.) AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.) AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.) Device \Driver\usbohci \Device\USBPDO-0 82B56500 Device \Driver\usbohci \Device\USBPDO-1 82B56500 Device \Driver\usbehci \Device\USBPDO-2 82AB9500 Device \Driver\usbohci \Device\USBPDO-3 82B56500 AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.) Device 82B00500 Device Cdfs.SYS (CD-ROM File System Driver/Microsoft Corporation) ---- Registry - GMER 1.0.15 ---- Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 -616794752 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 2133360819 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 3 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0x09 0xD3 0x1F 0xBC ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 2 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x82 0x78 0x84 0xFD ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xD5 0x77 0x5B 0x42 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 1 Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0x09 0xD3 0x1F 0xBC ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 2 Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x82 0x78 0x84 0xFD ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0 Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xD5 0x77 0x5B 0x42 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0 Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xD5 0x77 0x5B 0x42 ... ---- EOF - GMER 1.0.15 ----

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2010-07-04 20:05:57 - Run 1 OTL by OldTimer - Version 3.2.7.0 Folder = C:\Documents and Settings\Basieńka\Pulpit Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,00 Mb Total Physical Memory | 205,00 Mb Available Physical Memory | 40,00% Memory free 1,00 Gb Paging File | 1,00 Gb Available in Paging File | 54,00% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 43,64 Gb Total Space | 13,79 Gb Free Space | 31,60% Space Free | Partition Type: FAT32 Drive D: | 29,00 Gb Total Space | 25,00 Gb Free Space | 86,21% Space Free | Partition Type: FAT32 E: Drive not present or media not loaded Drive F: | 8,33 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: TWOJA-F12AC5256 Current User Name: Basieńka Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] [HKEY_USERS\S-1-5-21-4001825421-3301885769-440075869-1005\SOFTWARE\Classes\<extension>] .html [@ = htmlfile] -- Reg Error: Key error. File not found [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation) htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\Winamp.exe" /BOOKMARK "%1" (Nullsoft) Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\Winamp.exe" /ADD "%1" (Nullsoft) Directory [Winamp.Play] -- "C:\Program Files\Winamp\Winamp.exe" "%1" (Nullsoft) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 1 "FirewallDisableNotify" = 1 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 "25401:TCP" = 25401:TCP:*:Enabled:BitComet 25401 TCP "25401:UDP" = 25401:UDP:*:Enabled:BitComet 25401 UDP [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\Bonjour\mDNSResponder.exe" = C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour -- File not found "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation) "C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" = C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation) "C:\Program Files\eMule\emule.exe" = C:\Program Files\eMule\emule.exe:*:Disabled:eMule -- File not found "C:\Program Files\BearShare Applications\BearShare\BearShare.exe" = C:\Program Files\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare -- (MusicLab, LLC) "C:\Program Files\Gadu-Gadu\GG.EXE" = C:\Program Files\Gadu-Gadu\GG.EXE:*:Enabled:Gadu-Gadu - program główny -- File not found "C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe" = C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe:*:Enabled:Flashget2 -- File not found "C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe" = C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe:*:Enabled:FGLiveUpdate -- File not found "C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe" = C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe:*:Enabled:FGLiveUpdateEx -- File not found "C:\Program Files\Nowe Gadu-Gadu\gg.exe" = C:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu beta -- (GG Network S.A.) "C:\Program Files\Ares\Ares.exe" = C:\Program Files\Ares\Ares.exe:*:Disabled:Ares p2p for windows -- File not found "C:\Program Files\BitComet\BitComet.exe" = C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe -- File not found "C:\Program Files\AVG\AVG9\avgupd.exe" = C:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe -- (AVG Technologies CZ, s.r.o.) "C:\Program Files\AVG\AVG9\avgnsx.exe" = C:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe -- (AVG Technologies CZ, s.r.o.) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0D499481-22C6-4B25-8AC2-6D3F6C885FB9}" = OpenOffice.org Installer 1.0 "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer "{1CB92574-96F2-467B-B793-5CEB35C40C29}" = Image Resizer Powertoy for Windows XP "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer "{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}" = Skype™ 4.0 "{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 17 "{2792F12C-3515-4D69-8083-B557AF35F06F}" = LightScribe 1.4.89.1 "{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7 "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup "{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 "{4462AD13-F2AA-4CBD-9F95-293C38EED870}" = Power4 Gear "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = ASUSDVD "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{83F73CB1-7705-49D1-9852-84D839CA2A45}" = Wireless Console 2 "{8F722FA9-B994-4C9B-B292-FD32D6206EDF}" = ASUS WLAN Card Utilities/Driver "{90120000-0010-0415-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Polish) 12 "{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007 "{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007 "{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007 "{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007 "{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007 "{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007 "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007 "{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007 "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007 "{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007 "{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007 "{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007 "{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007 "{903B0415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Project Professional 2003 "{90A40415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components "{94FB906A-CF42-4128-A509-D353026A607E}" = REALTEK Gigabit and Fast Ethernet NIC Driver "{A87869D7-B133-498C-A347-D9BE109FF6C8}" = USB2.0 1.3M Web Cam "{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC76BA86-7AD7-1033-7B44-A70000000000}" = Adobe Reader 7.0 "{B09DFBF9-9148-4070-A493-69D71455D983}_is1" = Artweaver "{C151CE54-E7EA-4804-854B-F515368B0798}" = Athlon 64 Processor Driver "{D642E38E-0D24-486C-9A2D-E316DD696F4B}" = Microsoft XML Parser "{D98C0C51-F9BB-4EE4-B791-22BF6EE31045}" = Nero 7 Ultra Edition "{DE10AB76-4756-4913-BE25-55D1C1051F9A}" = WinFlash "{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update "{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.5 "AskTBar Uninstall" = Ask Toolbar "Asus ChkMail" = Asus ChkMail "Asus_A6_ScreenSaver" = Asus_A6_ScreenSaver "AVG9Uninstall" = AVG Free 9.0 "BearShare" = BearShare "BearShare MediaBar" = MediaBar "CNXT_MODEM_PCI_VEN_1039&DEV_7013&SUBSYS_C0131631" = Soft Data Fax Modem with SmartCP "DAEMON Tools Toolbar" = DAEMON Tools Toolbar "DirectShowPack" = DirectShow Pack (remove only) "ENTERPRISE" = Microsoft Office Enterprise 2007 "ffdshow" = ffdshow (remove only) "FFdshow_is1" = FFdshow [2006-08-05 | rev 2546] "FLVPlayer" = FLV Player 1.3.3 "GoJoe Pogo V1.21" = GoJoe Pogo V1.21 "HControl" = ATK0100 ACPI UTILITY "IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs "ie7" = Windows Internet Explorer 7 "ie8" = Windows Internet Explorer 8 "ipla" = ipla 1.1.3 "iPlus manager_is1" = iPlus manager 2.0 "KLiteCodecPack_is1" = K-Lite Codec Pack 2.81 Full "Lalka Klara - Stylistka" = Lalka Klara - Stylistka "Mozilla Firefox (3.5.10)" = Mozilla Firefox (3.5.10) "MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP "Niezbędnik CD_is1" = Niezbędnik CD "NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs "Nowe Gadu-Gadu" = Nowe Gadu-Gadu "NVIDIA Drivers" = NVIDIA Drivers "PhotoFiltre" = PhotoFiltre "PhotoScape" = PhotoScape "Picasa 3" = Picasa 3 "QuickTime" = QuickTime "QuicktimeAlt_is1" = QuickTime Alternative 1.81 "RealAlt_is1" = Real Alternative 1.51 "Safrosoft RoX_is1" = Safrosoft RoX 1.4 "Satsuki Decoder Pack" = Satsuki Decoder Pack "Searchqu MediaBar" = Windows Searchqu Toolbar "Seven Kingdoms AA" = Seven Kingdoms AA "SubEdit-Player_is1" = SubEdit-Player "SynTPDeinstKey" = Synaptics Pointing Device Driver "Trojan Remover_is1" = Trojan Remover 6.7.5 "VobSub" = VobSub v2.23 (Remove Only) "Winamp" = Winamp (remove only) "Windows Essentials Media Codec Pack" = Windows Essentials Media Codec Pack 1.0 "Windows Media Format Runtime" = Windows Media Format 11 runtime "Windows Media Player" = Windows Media Player 11 "Windows XP Service Pack" = Windows XP Service Pack 3 "WinRAR archiver" = Archiwizator WinRAR "WMFDist11" = Windows Media Format 11 runtime "wmp11" = Windows Media Player 11 "Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0 "XviD MPEG4 Video Codec" = XviD MPEG4 Video Codec (remove only) [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 2010-06-07 01:08:07 | Computer Name = TWOJA-F12AC5256 | Source = Google Update | ID = 20 Description = Error - 2010-06-12 19:30:19 | Computer Name = TWOJA-F12AC5256 | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca firefox.exe, wersja 1.9.1.3726, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. Error - 2010-06-17 15:11:33 | Computer Name = TWOJA-F12AC5256 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd iplusmanager.exe, wersja 0.0.0.0, moduł powodujący błąd unknown, wersja 0.0.0.0, adres błędu 0x00000000. Error - 2010-06-17 15:16:10 | Computer Name = TWOJA-F12AC5256 | Source = Google Update | ID = 20 Description = Error - 2010-06-19 16:28:08 | Computer Name = TWOJA-F12AC5256 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd iplusmanager.exe, wersja 0.0.0.0, moduł powodujący błąd unknown, wersja 0.0.0.0, adres błędu 0x00000000. Error - 2010-06-27 02:16:13 | Computer Name = TWOJA-F12AC5256 | Source = Google Update | ID = 20 Description = Error - 2010-06-28 15:50:43 | Computer Name = TWOJA-F12AC5256 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd infotool.exe, wersja 4.4.1.0, moduł powodujący błąd infotool.exe, wersja 4.4.1.0, adres błędu 0x00010190. Error - 2010-07-02 01:16:06 | Computer Name = TWOJA-F12AC5256 | Source = Google Update | ID = 20 Description = Error - 2010-07-04 12:44:30 | Computer Name = TWOJA-F12AC5256 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd au_.exe, wersja 4.35.0.1331, moduł powodujący błąd nsdialogs.dll, wersja 0.0.0.0, adres błędu 0x00001939. Error - 2010-07-04 13:07:57 | Computer Name = TWOJA-F12AC5256 | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca firefox.exe, wersja 1.9.1.3776, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. [ OSession Events ] Error - 2008-10-28 12:55:40 | Computer Name = TWOJA-F12AC5256 | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 359 seconds with 120 seconds of active time. This session ended with a crash. Error - 2010-02-23 06:43:22 | Computer Name = TWOJA-F12AC5256 | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 23 seconds with 0 seconds of active time. This session ended with a crash. [ System Events ] Error - 2010-06-29 06:07:16 | Computer Name = TWOJA-F12AC5256 | Source = Cdrom | ID = 262155 Description = Sterownik wykrył błąd kontrolera na \Device\CdRom0. Error - 2010-06-29 06:07:24 | Computer Name = TWOJA-F12AC5256 | Source = Cdrom | ID = 262155 Description = Sterownik wykrył błąd kontrolera na \Device\CdRom0. Error - 2010-06-29 06:07:33 | Computer Name = TWOJA-F12AC5256 | Source = Cdrom | ID = 262155 Description = Sterownik wykrył błąd kontrolera na \Device\CdRom0. Error - 2010-06-29 06:07:42 | Computer Name = TWOJA-F12AC5256 | Source = Cdrom | ID = 262155 Description = Sterownik wykrył błąd kontrolera na \Device\CdRom0. Error - 2010-06-29 06:07:51 | Computer Name = TWOJA-F12AC5256 | Source = Cdrom | ID = 262155 Description = Sterownik wykrył błąd kontrolera na \Device\CdRom0. Error - 2010-06-29 06:08:00 | Computer Name = TWOJA-F12AC5256 | Source = Cdrom | ID = 262155 Description = Sterownik wykrył błąd kontrolera na \Device\CdRom0. Error - 2010-06-29 06:08:09 | Computer Name = TWOJA-F12AC5256 | Source = Cdrom | ID = 262155 Description = Sterownik wykrył błąd kontrolera na \Device\CdRom0. Error - 2010-06-29 06:08:18 | Computer Name = TWOJA-F12AC5256 | Source = Cdrom | ID = 262155 Description = Sterownik wykrył błąd kontrolera na \Device\CdRom0. Error - 2010-07-03 16:32:50 | Computer Name = TWOJA-F12AC5256 | Source = Service Control Manager | ID = 7034 Description = Usługa NVIDIA Display Driver Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2010-07-04 12:01:09 | Computer Name = TWOJA-F12AC5256 | Source = Service Control Manager | ID = 7034 Description = Usługa NVIDIA Display Driver Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. < End of report >

**Posty:** 584 · przez **Andziorka** 04 Lip 2010, 21:20

W okienko OTL wklej poniższy skrypt i klik na Run Fix:

:Processes
explorer.exe

:OTL
IE - HKU\S-1-5-21-4001825421-3301885769-440075869-1005\..\URLSearchHook: {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL (Ask.com)
FF - prefs.js..browser.search.defaultenginename: "BearShare Web Search"
FF - prefs.js..keyword.URL: "http://search.bearshare.com//web?src=ffb&q="
O2 - BHO: (MediaBar) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\Program Files\BearShare Applications\MediaBar\ToolBar\BearshareMediabarDx.dll ()
O2 - BHO: (UrlHelper Class) - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\MediaBar\DataMngr\IEBHO.dll (MusicLab, LLC)
O2 - BHO: (Searchqu Toolbar) - {7FF99715-3016-4381-84CE-E4E4C9673020} - C:\Program Files\Windows Searchqu Toolbar\ToolBar\SearchquDx.dll ()
O2 - BHO: (Ask Search Assistant BHO) - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL (Ask.com)
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Basieńka\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll File not found
O2 - BHO: (Ask Toolbar BHO) - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL (Ask.com)
O3 - HKLM\..\Toolbar: (MediaBar) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\Program Files\BearShare Applications\MediaBar\ToolBar\BearshareMediabarDx.dll ()
O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {7FF99715-3016-4381-84CE-E4E4C9673020} - C:\Program Files\Windows Searchqu Toolbar\ToolBar\SearchquDx.dll ()
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL (Ask.com)
O3 - HKU\S-1-5-21-4001825421-3301885769-440075869-1005\..\Toolbar\ShellBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.
O3 - HKU\S-1-5-21-4001825421-3301885769-440075869-1005\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.
O3 - HKU\S-1-5-21-4001825421-3301885769-440075869-1005\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKU\S-1-5-21-4001825421-3301885769-440075869-1005\..\Toolbar\WebBrowser: (Ask Toolbar) - {FE063DB9-4EC0-403E-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL (Ask.com)
O4 - HKLM..\Run: [Zshutdown] c:\sysprep\patch\sysprep.cmd File not found
O4 - HKU\S-1-5-21-4001825421-3301885769-440075869-1005..\Run: [HEXelon MAX] C:\Program Files\HEXelon MAX 6\hexelon.exe File not found
O4 - HKU\S-1-5-21-4001825421-3301885769-440075869-1005..\Run: [Nero PhotoShow Media Manager] C:\PROGRA~1\Nero\NEROPH~1\data\Xtras\mssysmgr.exe File not found
O4 - HKU\S-1-5-21-4001825421-3301885769-440075869-1005..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe File not found
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O20 - AppInit_DLLs: (c:\progra~1\bearsh~1\mediabar\\datamngr\datamngr.dll) - c:\progra~1\bearsh~1\mediabar\\datamngr\datamngr.dll ()
O32 - AutoRun File - [2008-05-27 17:40:14 | 000,000,045 | R--- | M] () - F:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{267cce06-6a3a-11dd-8134-0018f3c40f1b}\Shell\AutoRun\command - "" = un9.cmd
O33 - MountPoints2\{267cce06-6a3a-11dd-8134-0018f3c40f1b}\Shell\explore\Command - "" = un9.cmd
O33 - MountPoints2\{267cce06-6a3a-11dd-8134-0018f3c40f1b}\Shell\open\Command - "" = un9.cmd
O33 - MountPoints2\{90986f4a-65e2-11dd-8130-0018f3c40f1b}\Shell\AutoRun\command - "" = un9.cmd
O33 - MountPoints2\{90986f4a-65e2-11dd-8130-0018f3c40f1b}\Shell\explore\Command - "" = un9.cmd
O33 - MountPoints2\{90986f4a-65e2-11dd-8130-0018f3c40f1b}\Shell\open\Command - "" = un9.cmd
O33 - MountPoints2\{90986f4b-65e2-11dd-8130-0018f3c40f1b}\Shell\AutoRun\command - "" = un9.cmd
O33 - MountPoints2\{90986f4b-65e2-11dd-8130-0018f3c40f1b}\Shell\explore\Command - "" = un9.cmd
O33 - MountPoints2\{90986f4b-65e2-11dd-8130-0018f3c40f1b}\Shell\open\Command - "" = un9.cmd
O33 - MountPoints2\{93072130-92ca-11dd-8182-0018f3c40f1b}\Shell - "" = AutoRun
O33 - MountPoints2\{93072130-92ca-11dd-8182-0018f3c40f1b}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008-04-24 01:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{93072131-92ca-11dd-8182-0018f3c40f1b}\Shell - "" = AutoRun
O33 - MountPoints2\{93072131-92ca-11dd-8182-0018f3c40f1b}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008-04-24 01:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{9d8823d4-897e-11dd-8169-0018f3c40f1b}\Shell - "" = AutoRun
O33 - MountPoints2\{9d8823d4-897e-11dd-8169-0018f3c40f1b}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008-04-24 01:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{bc6f5dfa-8954-11dd-8167-0018f3c40f1b}\Shell - "" = AutoRun
O33 - MountPoints2\{bc6f5dfa-8954-11dd-8167-0018f3c40f1b}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008-04-24 01:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)

:Files
C:\Documents and Settings\Basieńka\Pulpit\kh6vek1p.exe
C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\searchplugins\BearShareWebSearch.xml
C:\Program Files\Mozilla Firefox\searchplugins\BearShareWebSearch.xml
C:\Program Files\Windows Searchqu Toolbar\ToolBar
C:\Program Files\BearShare Applications\MediaBar\ToolBar
C:\Program Files\AskTBar
C:\Program Files\DAEMON Tools Toolbar
C:\FOUND.027
C:\FOUND.026
C:\FOUND.025

:Commands
[emptytemp]
[start explorer]
[Reboot]

Otwórz notatnik tekstowy i wklej do niego poniższy tekst:

Kod: Zaznacz wszystko: Windows Registry Editor Version 5.00 [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

Zapisz jako->Wybierz Wszystkie pliki->wpisz Fix.reg->Następnie kliknij na zapisany plik i uruchom komputer ponownie.

Przeskanuj komputer tym: http://www.programosy.pl/program,malwarebytes-anti-malware.html usuń wszystko co znajdzie i daj loga po kasowaniu (loga z Malware)

**Posty:** 2183 · przez **NieWiem** 04 Lip 2010, 21:54

Andziorka, najpierw to poprosimy o PORZĄDNIE WYKONANY log z Gmera - po wyinstalowaniu wirtualnych napędów i ubiciu sterownika sptd. Bez tego log ten jest nieczytelny i nie jestem w stanie jednoznacznie stweirdzić czy nie ma infekcji rootkitowej

programy-emulujace-napedy-wazne-vt117886.html
gmer-opis-dzialania-vt117883.html

17rafal, proszę pokazać poprawny log z Gmera!

**Posty:** 72 · przez **17rafal** 04 Lip 2010, 23:55

Kod: Zaznacz wszystko: GMER 1.0.15.15281 - http://www.gmer.net Rootkit scan 2010-07-04 23:54:18 Windows 5.1.2600 Dodatek Service Pack 3 Running: kh6vek1p.exe; Driver: C:\DOCUME~1\BASIEŃKA\USTAWI~1\Temp\pxxoqkow.sys ---- Kernel code sections - GMER 1.0.15 ---- .text C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xF8037360, 0x20328D, 0xE8000020] ---- Devices - GMER 1.0.15 ---- Device Fastfat.sys (Fast FAT File System Driver/Microsoft Corporation) AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.) AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.) AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.) AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.) Device \Driver\pxxoqkow \Device\pxxoqkow pxxoqkow.sys AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.) AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.) Device mrxsmb.sys (Windows NT SMB Minirdr/Microsoft Corporation) Device Cdfs.SYS (CD-ROM File System Driver/Microsoft Corporation) ---- Registry - GMER 1.0.15 ---- Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0x09 0xD3 0x1F 0xBC ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 2 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x82 0x78 0x84 0xFD ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xD5 0x77 0x5B 0x42 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 1 Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0x09 0xD3 0x1F 0xBC ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 2 Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x82 0x78 0x84 0xFD ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0 Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xD5 0x77 0x5B 0x42 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0 Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xD5 0x77 0x5B 0x42 ... ---- EOF - GMER 1.0.15 ----

**Posty:** 2183 · przez **NieWiem** 05 Lip 2010, 08:08

A teraz raport z czyszczenia od Andziorki, i nowy log z OTL

**Posty:** 72 · przez **17rafal** 06 Lip 2010, 19:15

Kod: Zaznacz wszystko: Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Wersja bazy: 4052 Windows 5.1.2600 Dodatek Service Pack 3 Internet Explorer 8.0.6001.18702 2010-07-06 18:50:57 mbam-log-2010-07-06 (18-50-57).txt Typ skanowania: Szybkie skanowanie Przeskanowano obiektów: 118417 Upłynęło: 8 minut(y), 43 sekund(y) Zainfekowanych procesów w pamięci: 0 Zainfekowanych modułów w pamięci: 0 Zainfekowanych kluczy rejestru: 1 Zainfekowanych wartości rejestru: 0 Zainfekowane informacje rejestru systemowego: 2 Zainfekowanych folderów: 0 Zainfekowanych plików: 0 Zainfekowanych procesów w pamięci: (Nie znaleziono zagrożeń) Zainfekowanych modułów w pamięci: (Nie znaleziono zagrożeń) Zainfekowanych kluczy rejestru: HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> No action taken. Zainfekowanych wartości rejestru: (Nie znaleziono zagrożeń) Zainfekowane informacje rejestru systemowego: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken. Zainfekowanych folderów: (Nie znaleziono zagrożeń) Zainfekowanych plików: (Nie znaleziono zagrożeń)

Kod: Zaznacz wszystko: All processes killed ========== PROCESSES ========== No active process named explorer.exe was found! ========== OTL ========== Registry value HKEY_USERS\S-1-5-21-4001825421-3301885769-440075869-1005\Software\Microsoft\Internet Explorer\URLSearchHooks\\{9CB65206-89C4-402c-BA80-02D8C59F9B1D} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9CB65206-89C4-402c-BA80-02D8C59F9B1D}\ not found. C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL moved successfully. Prefs.js: "BearShare Web Search" removed from browser.search.defaultenginename Prefs.js: "http://search.bearshare.com//web?src=ffb&q=" removed from keyword.URL Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0974BA1E-64EC-11DE-B2A5-E43756D89593}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0974BA1E-64EC-11DE-B2A5-E43756D89593}\ deleted successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\BearshareMediabarDx.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}\ deleted successfully. C:\Program Files\BearShare Applications\MediaBar\DataMngr\IEBHO.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7FF99715-3016-4381-84CE-E4E4C9673020}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FF99715-3016-4381-84CE-E4E4C9673020}\ deleted successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\SearchquDx.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CB65201-89C4-402c-BA80-02D8C59F9B1D}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9CB65201-89C4-402c-BA80-02D8C59F9B1D}\ deleted successfully. File C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FE063DB1-4EC0-403e-8DD8-394C54984B2C}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FE063DB1-4EC0-403e-8DD8-394C54984B2C}\ deleted successfully. C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{0974BA1E-64EC-11DE-B2A5-E43756D89593} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0974BA1E-64EC-11DE-B2A5-E43756D89593}\ not found. File C:\Program Files\BearShare Applications\MediaBar\ToolBar\BearshareMediabarDx.dll not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{7FF99715-3016-4381-84CE-E4E4C9673020} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FF99715-3016-4381-84CE-E4E4C9673020}\ not found. File C:\Program Files\Windows Searchqu Toolbar\ToolBar\SearchquDx.dll not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{FE063DB9-4EC0-403e-8DD8-394C54984B2C} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FE063DB9-4EC0-403e-8DD8-394C54984B2C}\ deleted successfully. File C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL not found. Registry value HKEY_USERS\S-1-5-21-4001825421-3301885769-440075869-1005\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{C4069E3A-68F1-403E-B40E-20066696354B} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C4069E3A-68F1-403E-B40E-20066696354B}\ not found. Registry value HKEY_USERS\S-1-5-21-4001825421-3301885769-440075869-1005\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7}\ not found. Registry value HKEY_USERS\S-1-5-21-4001825421-3301885769-440075869-1005\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ deleted successfully. C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll moved successfully. Registry value HKEY_USERS\S-1-5-21-4001825421-3301885769-440075869-1005\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{FE063DB9-4EC0-403E-8DD8-394C54984B2C} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FE063DB9-4EC0-403E-8DD8-394C54984B2C}\ not found. File C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Zshutdown deleted successfully. Registry value HKEY_USERS\S-1-5-21-4001825421-3301885769-440075869-1005\Software\Microsoft\Windows\CurrentVersion\Run\\HEXelon MAX deleted successfully. Registry value HKEY_USERS\S-1-5-21-4001825421-3301885769-440075869-1005\Software\Microsoft\Windows\CurrentVersion\Run\\Nero PhotoShow Media Manager deleted successfully. Registry value HKEY_USERS\S-1-5-21-4001825421-3301885769-440075869-1005\Software\Microsoft\Windows\CurrentVersion\Run\\Picasa Media Detector deleted successfully. Starting removal of ActiveX control {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} C:\WINDOWS\Downloaded Program Files\erma.inf moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:c:\progra~1\bearsh~1\mediabar\\datamngr\datamngr.dll deleted successfully. File move failed. c:\progra~1\bearsh~1\mediabar\\datamngr\datamngr.dll scheduled to be moved on reboot. File move failed. F:\AUTORUN.INF scheduled to be moved on reboot. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{267cce06-6a3a-11dd-8134-0018f3c40f1b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{267cce06-6a3a-11dd-8134-0018f3c40f1b}\ not found. File un9.cmd not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{267cce06-6a3a-11dd-8134-0018f3c40f1b}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{267cce06-6a3a-11dd-8134-0018f3c40f1b}\ not found. File un9.cmd not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{267cce06-6a3a-11dd-8134-0018f3c40f1b}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{267cce06-6a3a-11dd-8134-0018f3c40f1b}\ not found. File un9.cmd not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{90986f4a-65e2-11dd-8130-0018f3c40f1b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{90986f4a-65e2-11dd-8130-0018f3c40f1b}\ not found. File un9.cmd not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{90986f4a-65e2-11dd-8130-0018f3c40f1b}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{90986f4a-65e2-11dd-8130-0018f3c40f1b}\ not found. File un9.cmd not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{90986f4a-65e2-11dd-8130-0018f3c40f1b}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{90986f4a-65e2-11dd-8130-0018f3c40f1b}\ not found. File un9.cmd not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{90986f4b-65e2-11dd-8130-0018f3c40f1b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{90986f4b-65e2-11dd-8130-0018f3c40f1b}\ not found. File un9.cmd not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{90986f4b-65e2-11dd-8130-0018f3c40f1b}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{90986f4b-65e2-11dd-8130-0018f3c40f1b}\ not found. File un9.cmd not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{90986f4b-65e2-11dd-8130-0018f3c40f1b}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{90986f4b-65e2-11dd-8130-0018f3c40f1b}\ not found. File un9.cmd not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{93072130-92ca-11dd-8182-0018f3c40f1b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{93072130-92ca-11dd-8182-0018f3c40f1b}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{93072130-92ca-11dd-8182-0018f3c40f1b}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{93072130-92ca-11dd-8182-0018f3c40f1b}\ not found. File move failed. F:\AutoRun.exe scheduled to be moved on reboot. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{93072131-92ca-11dd-8182-0018f3c40f1b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{93072131-92ca-11dd-8182-0018f3c40f1b}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{93072131-92ca-11dd-8182-0018f3c40f1b}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{93072131-92ca-11dd-8182-0018f3c40f1b}\ not found. File move failed. F:\AutoRun.exe scheduled to be moved on reboot. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9d8823d4-897e-11dd-8169-0018f3c40f1b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9d8823d4-897e-11dd-8169-0018f3c40f1b}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9d8823d4-897e-11dd-8169-0018f3c40f1b}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9d8823d4-897e-11dd-8169-0018f3c40f1b}\ not found. File move failed. F:\AutoRun.exe scheduled to be moved on reboot. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{bc6f5dfa-8954-11dd-8167-0018f3c40f1b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{bc6f5dfa-8954-11dd-8167-0018f3c40f1b}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{bc6f5dfa-8954-11dd-8167-0018f3c40f1b}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{bc6f5dfa-8954-11dd-8167-0018f3c40f1b}\ not found. File move failed. F:\AutoRun.exe scheduled to be moved on reboot. ========== FILES ========== C:\Documents and Settings\Basieńka\Pulpit\kh6vek1p.exe moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\searchplugins\BearShareWebSearch.xml moved successfully. C:\Program Files\Mozilla Firefox\searchplugins\BearShareWebSearch.xml moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\searchbar folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\options folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\css folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\css folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217 folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257 folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255 folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227 folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\modules folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\data\search folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\data folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\chrome folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar\components folder moved successfully. C:\Program Files\Windows Searchqu Toolbar\ToolBar folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\skin\searchbar folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\skin\options folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\css folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\css folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\skin folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217 folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227 folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\content\modules folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\content\data\search folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\content\data folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome\content folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\chrome folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar\components folder moved successfully. C:\Program Files\BearShare Applications\MediaBar\ToolBar folder moved successfully. C:\Program Files\AskTBar\PopSwatr\History folder moved successfully. C:\Program Files\AskTBar\PopSwatr folder moved successfully. C:\Program Files\AskTBar\SrchAstt\2.bin folder moved successfully. C:\Program Files\AskTBar\SrchAstt folder moved successfully. C:\Program Files\AskTBar\bar\Settings folder moved successfully. C:\Program Files\AskTBar\bar\History folder moved successfully. C:\Program Files\AskTBar\bar\Cache folder moved successfully. C:\Program Files\AskTBar\bar\2.bin folder moved successfully. C:\Program Files\AskTBar\bar folder moved successfully. C:\Program Files\AskTBar folder moved successfully. C:\Program Files\DAEMON Tools Toolbar\Resources folder moved successfully. C:\Program Files\DAEMON Tools Toolbar folder moved successfully. C:\FOUND.027 folder moved successfully. C:\FOUND.026 folder moved successfully. C:\FOUND.025 folder moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Default User ->Temp folder emptied: 984208 bytes ->Temporary Internet Files folder emptied: 32768 bytes ->Flash cache emptied: 75 bytes User: All Users User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 194302 bytes User: LocalService ->Temp folder emptied: 66016 bytes ->Temporary Internet Files folder emptied: 7573818 bytes User: Basieńka ->Temp folder emptied: 6865485544 bytes ->Temporary Internet Files folder emptied: 281565876 bytes ->Java cache emptied: 39183132 bytes ->FireFox cache emptied: 42478389 bytes ->Flash cache emptied: 175346 bytes User: Downloads User: Dokuments User: profiles %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 19569 bytes %systemroot%\System32 .tmp files removed: 22933028 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 37222770 bytes RecycleBin emptied: 496517369 bytes Total Files Cleaned = 7 433,00 mb OTL by OldTimer - Version 3.2.7.0 log created on 07062010_181618 Files\Folders moved on Reboot... File move failed. c:\progra~1\bearsh~1\mediabar\\datamngr\datamngr.dll scheduled to be moved on reboot. File move failed. F:\AUTORUN.INF scheduled to be moved on reboot. File move failed. F:\AutoRun.exe scheduled to be moved on reboot. Registry entries deleted on Reboot...

http://www.wklej.org/id/361112/

http://www.wklej.org/id/361114/

**Posty:** 14 · przez **djkamil09061991** 06 Lip 2010, 19:26

wklej jeszcze:

:OTL
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-4001825421-3301885769-440075869-1005\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
[2010-07-06 18:55:56 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010-07-06 18:16:06 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

:Files
C:\Program Files\Google\Google Toolbar
C:\Program Files\Google\GoogleToolbarNotifier

:Commands
[emptytemp]

Potem naciśnij sprzątanie w OTL

**Posty:** 72 · przez **17rafal** 06 Lip 2010, 20:35

zrobilem to co w ostatnim poscie, to skasowal sie otl, nie wiem czy tak mialo byc, mam zrobic jakies logi, czy cos jest nie tak jeszcze?

**Posty:** 14 · przez **djkamil09061991** 06 Lip 2010, 20:50

wejdz w start uruchom wpisz msconfig następnie zakładka uruchamianie i odznacz niepotrzebne rzeczy ponieważ masz ich tam zbyt wiele. Przeczyść komputer ccleanerem oraz zrób defragmentacje programem diskeeper

**Posty:** 72 · przez **17rafal** 06 Lip 2010, 21:18

zrobilem cclenerem, zaraz zrobie diskeeperem, co do odznaczenie niepotrzebnych w msconfig to tak nie bardzo wiem ktore;/

**Posty:** 14 · przez **djkamil09061991** 06 Lip 2010, 21:27

zostaw najpotrzebniejsze rzeczy według ciebie na pewno antywirusa plus jakieś sterowniki typu nvidia które i tak nie są zbyt potrzebne w auto starcie. Mozesz napewno odznaczyć gg ,trojan remover, nero, update do kodekow. praktycznie większość

**Posty:** 2183 · przez **NieWiem** 06 Lip 2010, 21:33

plus jakieś sterowniki typu nvidia które i tak nie są zbyt potrzebne w auto starcie

jasne, wyłączmy sterowniki a potem komputer mu zacznie sypać bsodami...

Przejrzałem te logi, tą "pomoc" tu udzielaną i powiem szczerze: djkamil09061991, każesz usuwać LEGALNY (!) Google Toolbar, ale szpiegowskich elementów z przeglądarek już nie.

17rafal, ściągnij nową wersję OTL albo OTS, RSIT i wklej loga... doczyszczę to, co poprzednicy zostawili.

**Posty:** 72 · przez **17rafal** 06 Lip 2010, 22:07

mam nadzieje ze dobre sa

Kod: Zaznacz wszystko: OTL logfile created on: 2010-07-06 21:50:14 - Run 1 OTL by OldTimer - Version 3.2.7.1 Folder = C:\Documents and Settings\Basieńka\Pulpit Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,00 Mb Total Physical Memory | 117,00 Mb Available Physical Memory | 23,00% Memory free 1,00 Gb Paging File | 0,00 Gb Available in Paging File | 35,00% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 43,64 Gb Total Space | 21,72 Gb Free Space | 49,76% Space Free | Partition Type: FAT32 Drive D: | 29,00 Gb Total Space | 25,00 Gb Free Space | 86,21% Space Free | Partition Type: FAT32 E: Drive not present or media not loaded Drive F: | 8,33 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: TWOJA-F12AC5256 Current User Name: Basieńka Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010-07-06 21:47:10 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Basieńka\Pulpit\OTL.exe PRC - [2010-06-30 09:45:56 | 002,065,248 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgtray.exe PRC - [2010-06-30 09:45:34 | 000,515,424 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgrsx.exe PRC - [2010-06-30 09:45:26 | 000,620,896 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgnsx.exe PRC - [2010-06-30 09:42:26 | 000,722,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgcsrvx.exe PRC - [2010-06-30 09:42:20 | 001,101,152 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgchsvx.exe PRC - [2010-06-28 21:57:26 | 000,308,064 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgwdsvc.exe PRC - [2010-06-24 16:12:44 | 000,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2010-04-15 19:01:58 | 001,732,960 | ---- | M] (Diskeeper Corporation) -- C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe PRC - [2010-02-23 18:10:16 | 000,786,360 | ---- | M] (iMesh, Inc) -- C:\Program Files\BearShare Applications\MediaBar\DataMngr\DataMngrUI.exe PRC - [2009-12-21 13:07:38 | 003,297,280 | ---- | M] () -- C:\Program Files\iPlus\iPlusManager.exe PRC - [2009-10-28 13:44:08 | 011,539,048 | ---- | M] (GG Network S.A.) -- C:\Program Files\Nowe Gadu-Gadu\gg.exe PRC - [2009-10-28 12:43:06 | 000,077,824 | ---- | M] () -- C:\Program Files\Nowe Gadu-Gadu\spellchecker_gg.exe PRC - [2008-04-14 19:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-05-16 09:27:38 | 001,209,904 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe PRC - [2007-05-16 09:27:16 | 000,153,136 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe PRC - [2005-11-02 19:33:30 | 000,180,224 | ---- | M] () -- C:\Program Files\Asus\ASUS Live Update\ALU.exe PRC - [2005-10-12 14:07:56 | 000,987,136 | ---- | M] () -- C:\Program Files\Wireless Console 2\wcourier.exe PRC - [2005-08-28 23:30:02 | 000,102,400 | ---- | M] () -- C:\WINDOWS\ATK0100\HControl.exe PRC - [2005-08-22 08:50:08 | 001,986,560 | ---- | M] () -- C:\WINDOWS\ATK0100\ATKOSD.exe PRC - [2005-07-22 03:00:10 | 000,081,920 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE PRC - [2005-06-16 15:48:00 | 000,086,016 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\Asus\Power4 Gear\BatteryLife.exe PRC - [2005-06-15 15:50:00 | 001,623,040 | ---- | M] (ASUSTeK COMPUTER INC.) -- C:\Program Files\Asus\WLAN Card Utilities\Center.exe PRC - [2005-01-12 03:01:32 | 000,032,768 | ---- | M] (Cyberlink Corp.) -- C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe PRC - [2004-05-06 12:21:04 | 000,496,640 | ---- | M] () -- C:\WINDOWS\system32\ASWLSVC.exe PRC - [2003-09-12 20:25:30 | 000,032,768 | ---- | M] (asus) -- C:\Program Files\Asus\Asus ChkMail\ChkMail.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010-07-06 21:47:10 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Basieńka\Pulpit\OTL.exe MOD - [2008-04-14 19:16:32 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ) SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt) SRV - [2010-06-28 21:57:26 | 000,308,064 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG9\avgwdsvc.exe -- (avg9wd) SRV - [2010-04-15 19:01:58 | 001,732,960 | ---- | M] (Diskeeper Corporation) [Auto | Running] -- C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe -- (Diskeeper) SRV - [2004-05-06 12:21:04 | 000,496,640 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\ASWLSVC.exe -- (ASWLSVC) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2010-06-30 09:45:42 | 000,242,896 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (AvgTdiX) DRV - [2010-06-30 09:45:30 | 000,029,584 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (AvgMfx86) DRV - [2010-06-28 21:57:42 | 000,216,200 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (AvgLdx86) DRV - [2010-03-10 11:29:24 | 000,042,144 | ---- | M] (Diskeeper Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\DKRtWrt.sys -- (DKRtWrt) DRV - [2008-07-10 15:29:52 | 000,101,376 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard) DRV - [2006-12-08 11:39:32 | 000,015,781 | ---- | M] (Meetinghouse Data Communications) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\mdc8021x.sys -- (MDC8021X) AEGIS Protocol (IEEE 802.1x) DRV - [2005-10-03 10:26:36 | 000,720,470 | ---- | M] (Syntek America Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynMini.sys -- (SynMini) DRV - [2005-10-03 10:26:14 | 000,008,278 | ---- | M] (Syntek America Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynScan.sys -- (SynScan) DRV - [2005-09-23 07:27:00 | 003,522,304 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2005-08-18 21:50:44 | 000,190,912 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP) DRV - [2005-07-26 05:03:22 | 003,644,032 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2005-06-22 02:50:50 | 001,034,752 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV) DRV - [2005-06-22 02:50:12 | 000,216,320 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWSIS.sys -- (HSFHWSIS) DRV - [2005-06-22 02:50:04 | 000,716,416 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf) DRV - [2005-05-11 11:36:00 | 000,051,328 | ---- | M] (REDC) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\rimsptsk.sys -- (rimsptsk) DRV - [2005-05-11 11:36:00 | 000,027,136 | ---- | M] (REDC) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\risdptsk.sys -- (risdptsk) DRV - [2005-03-09 15:53:00 | 000,043,008 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8) DRV - [2005-03-03 22:10:26 | 000,074,496 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys -- (RTL8023xp) DRV - [2005-02-17 10:07:48 | 000,005,632 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ATKACPI.sys -- (MTsensor) DRV - [2005-02-11 21:46:22 | 000,371,712 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX) DRV - [2002-09-09 19:54:06 | 000,016,269 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\ASNDIS5.sys -- (ASNDIS5) DRV - [2001-08-17 21:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.asus.com IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.asus.com IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.asus.com IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.asus.com IE - HKU\S-1-5-21-4001825421-3301885769-440075869-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKU\S-1-5-21-4001825421-3301885769-440075869-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKU\S-1-5-21-4001825421-3301885769-440075869-1005\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google IE - HKU\S-1-5-21-4001825421-3301885769-440075869-1005\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKU\S-1-5-21-4001825421-3301885769-440075869-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKU\S-1-5-21-4001825421-3301885769-440075869-1005\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKU\S-1-5-21-4001825421-3301885769-440075869-1005\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\S-1-5-21-4001825421-3301885769-440075869-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "" FF - prefs.js..browser.search.defaultthis.engineName: "Games Bar 2 Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2452477&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.order.1: "BearShare Web Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {E84D42CA-64EB-11DE-A65F-8C3656D89593}:3.1 FF - prefs.js..extensions.enabledItems: {7FF99715-3016-4381-84CE-E4E4C9673020}:1.0 FF - prefs.js..extensions.enabledItems: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8}:1.0.7 FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.812 FF - HKLM\software\mozilla\Firefox\extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG9\Firefox [2010-06-28 21:57:24 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.10\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2008-10-22 20:16:48 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.10\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2008-10-22 20:16:48 | 000,000,000 | ---D | M] [2008-10-22 20:17:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Extensions [2008-10-22 20:17:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions [2009-10-29 21:02:10 | 000,000,000 | ---D | M] (Stylish) -- C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8} [2010-03-05 18:45:02 | 000,000,000 | ---D | M] (Searchqu Toolbar) -- C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020} [2010-03-05 18:36:26 | 000,000,000 | ---D | M] (MediaBar) -- C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593} [2010-05-22 13:06:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\DTToolbar@toolbarnet.com [2009-06-23 22:25:22 | 000,001,707 | ---- | M] () -- C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\searchplugins\wyszukiwarka-prac---sciagapl.xml [2010-01-20 12:19:48 | 000,000,925 | ---- | M] () -- C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\searchplugins\conduit.xml [2010-05-22 13:06:08 | 000,002,059 | ---- | M] () -- C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\searchplugins\daemon-search.xml [2008-10-22 20:16:48 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2008-11-11 09:38:54 | 000,663,552 | ---- | M] (BitComet) -- C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll [2009-12-20 10:20:54 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2009-12-20 10:20:54 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2009-12-20 10:20:54 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2009-12-20 10:20:54 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2009-12-20 10:20:54 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2009-12-20 10:20:54 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2004-08-04 13:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKLM\..\Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKU\S-1-5-21-4001825421-3301885769-440075869-1005\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O4 - HKLM..\Run: [ASUS Live Update] C:\Program Files\Asus\ASUS Live Update\ALU.exe () O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [Control Center] C:\Program Files\Asus\WLAN Card Utilities\Center.exe (ASUSTeK COMPUTER INC.) O4 - HKLM..\Run: [DataMngr] C:\PROGRA~1\BEARSH~1\MEDIABAR\\DATAMNGR\DataMngrUI.exe () O4 - HKLM..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe () O4 - HKLM..\Run: [iPlusManager] C:\Program Files\iPlus\iPlusChecker.exe () O4 - HKLM..\Run: [Media Codec Update Service] C:\Program Files\Essentials Codec Pack\update.exe (MediaCodec.Org) O4 - HKLM..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe (Microsoft Corporation) O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe (ASUSTeK Computer Inc.) O4 - HKLM..\Run: [RemoteControl] C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe (Cyberlink Corp.) O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe () O4 - HKU\S-1-5-21-4001825421-3301885769-440075869-1005..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG) O4 - HKU\S-1-5-21-4001825421-3301885769-440075869-1005..\Run: [Nowe Gadu-Gadu] C:\Program Files\Nowe Gadu-Gadu\gg.exe (GG Network S.A.) O4 - HKU\S-1-5-21-4001825421-3301885769-440075869-1005..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-4001825421-3301885769-440075869-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Basieńka\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Basieńka\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-12-08 11:28:24 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ] O32 - AutoRun File - [2008-04-24 01:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.) - F:\AutoRun.exe -- [ CDFS ] O32 - AutoRun File - [2008-05-27 17:40:14 | 000,000,045 | R--- | M] () - F:\AUTORUN.INF -- [ CDFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010-07-06 21:47:09 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Basieńka\Pulpit\OTL.exe [2010-07-06 21:44:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood [2010-07-06 21:43:48 | 000,042,144 | ---- | C] (Diskeeper Corporation) -- C:\WINDOWS\System32\drivers\DKRtWrt.sys [2010-07-06 21:43:27 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Diskeeper Corporation [2010-07-06 21:43:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Diskeeper Corporation [2010-07-06 21:43:11 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Home Server [2010-07-06 21:43:11 | 000,000,000 | ---D | C] -- C:\Program Files\Diskeeper Corporation [2010-07-06 21:40:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Basieńka\Pulpit\X86 [2010-07-06 21:40:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Basieńka\Pulpit\X64 [2010-07-06 21:15:28 | 039,699,128 | ---- | C] (Diskeeper Corporation ) -- C:\Documents and Settings\Basieńka\Pulpit\Diskeeper2010-Home-30day.exe [2010-07-06 21:08:15 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Basieńka\Recent [2010-07-06 20:57:57 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2010-07-06 20:56:09 | 003,396,176 | ---- | C] (Piriform Ltd) -- C:\Documents and Settings\Basieńka\Pulpit\ccsetup233.exe [2010-07-06 20:52:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss [2010-07-06 18:39:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Basieńka\Dane aplikacji\Malwarebytes [2010-07-06 18:38:55 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010-07-06 18:38:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes [2010-07-06 18:38:53 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010-07-06 18:38:53 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2010-07-06 18:38:03 | 006,153,352 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\Basieńka\Pulpit\mbam-setup.exe [2010-07-04 18:45:18 | 000,880,624 | ---- | C] (Duplex Secure Ltd.) -- C:\Documents and Settings\Basieńka\Pulpit\SPTDinst-v162-x86.exe [2010-06-28 21:57:46 | 000,012,464 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll [2010-06-28 21:57:45 | 000,242,896 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys [2010-06-28 21:57:40 | 000,216,200 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys [2010-06-28 21:57:39 | 000,029,584 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys [2010-06-28 21:57:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\Avg [2010-06-28 21:57:23 | 000,000,000 | ---D | C] -- C:\Program Files\AVG [2010-06-28 21:57:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\avg9 [2010-06-28 21:15:34 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Ahead [2010-06-11 08:24:37 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedvtool.dll [2004-05-07 17:40:16 | 000,327,680 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll [2004-02-14 14:49:52 | 000,049,152 | ---- | C] ( ) -- C:\WINDOWS\System32\rv40.dll [2004-01-30 14:48:20 | 000,241,723 | ---- | C] ( ) -- C:\WINDOWS\System32\hxltcolor.dll [2004-01-30 14:48:20 | 000,176,195 | ---- | C] ( ) -- C:\WINDOWS\System32\drv2.dll [2004-01-30 14:48:20 | 000,057,411 | ---- | C] ( ) -- C:\WINDOWS\System32\rv20.dll [2004-01-30 14:48:20 | 000,049,221 | ---- | C] ( ) -- C:\WINDOWS\System32\rv30.dll [2004-01-30 14:48:19 | 000,106,561 | ---- | C] ( ) -- C:\WINDOWS\System32\sipr.dll [2004-01-30 14:48:19 | 000,077,889 | ---- | C] ( ) -- C:\WINDOWS\System32\atrc.dll [2004-01-30 14:32:42 | 000,065,602 | ---- | C] ( ) -- C:\WINDOWS\System32\cook.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010-07-06 21:58:50 | 010,747,904 | -H-- | M] () -- C:\Documents and Settings\Basieńka\NTUSER.DAT [2010-07-06 21:52:18 | 000,824,681 | ---- | M] () -- C:\Documents and Settings\Basieńka\Pulpit\RSIT.exe [2010-07-06 21:47:10 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Basieńka\Pulpit\OTL.exe [2010-07-06 21:43:32 | 000,001,920 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Diskeeper 2010.lnk [2010-07-06 21:22:02 | 039,699,128 | ---- | M] (Diskeeper Corporation ) -- C:\Documents and Settings\Basieńka\Pulpit\Diskeeper2010-Home-30day.exe [2010-07-06 21:16:10 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2010-07-06 21:16:06 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2010-07-06 20:58:08 | 000,000,586 | ---- | M] () -- C:\Documents and Settings\Basieńka\Pulpit\CCleaner.lnk [2010-07-06 20:56:06 | 003,396,176 | ---- | M] (Piriform Ltd) -- C:\Documents and Settings\Basieńka\Pulpit\ccsetup233.exe [2010-07-06 20:54:14 | 000,000,623 | ---- | M] () -- C:\WINDOWS\win.ini [2010-07-06 20:54:14 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2010-07-06 20:54:14 | 000,000,211 | RHS- | M] () -- C:\boot.ini [2010-07-06 20:29:34 | 000,000,170 | ---- | M] () -- C:\ASWL2K.ini [2010-07-06 20:29:04 | 000,037,106 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2010-07-06 20:28:42 | 001,560,656 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010-07-06 20:27:58 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010-07-06 20:27:44 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010-07-06 20:27:40 | 536,268,800 | -HS- | M] () -- C:\hiberfil.sys [2010-07-06 20:26:28 | 000,000,292 | -HS- | M] () -- C:\Documents and Settings\Basieńka\ntuser.ini [2010-07-06 18:39:00 | 000,000,600 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk [2010-07-06 18:38:24 | 006,153,352 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\Basieńka\Pulpit\mbam-setup.exe [2010-07-06 18:26:46 | 000,000,124 | ---- | M] () -- C:\Documents and Settings\Basieńka\Pulpit\Fix.reg [2010-07-06 17:28:38 | 061,677,838 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm [2010-07-04 18:45:08 | 000,880,624 | ---- | M] (Duplex Secure Ltd.) -- C:\Documents and Settings\Basieńka\Pulpit\SPTDinst-v162-x86.exe [2010-06-30 21:58:46 | 000,025,088 | ---- | M] () -- C:\Documents and Settings\Basieńka\Moje dokumenty\GRAFIK LIPIEC.xls [2010-06-30 12:48:02 | 000,026,112 | ---- | M] () -- C:\Documents and Settings\Basieńka\Moje dokumenty\Kopia Koszalin-grafik_lipiec2010.xls [2010-06-30 09:45:42 | 000,242,896 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys [2010-06-30 09:45:30 | 000,029,584 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys [2010-06-28 21:57:48 | 000,012,464 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll [2010-06-28 21:57:48 | 000,001,411 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\AVG Free 9.0.lnk [2010-06-28 21:57:42 | 000,216,200 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys [2010-06-28 21:57:40 | 000,113,461 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\iavichjw.avm [2010-06-28 21:18:46 | 000,002,289 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Nero StartSmart.lnk [2010-06-13 22:05:08 | 000,045,568 | ---- | M] () -- C:\Documents and Settings\Basieńka\Pulpit\ogrodek.xls [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-07-06 21:52:20 | 000,824,681 | ---- | C] () -- C:\Documents and Settings\Basieńka\Pulpit\RSIT.exe [2010-07-06 21:45:22 | 000,001,920 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Diskeeper 2010.lnk [2010-07-06 20:58:06 | 000,000,586 | ---- | C] () -- C:\Documents and Settings\Basieńka\Pulpit\CCleaner.lnk [2010-07-06 18:38:59 | 000,000,600 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk [2010-07-06 18:26:44 | 000,000,124 | ---- | C] () -- C:\Documents and Settings\Basieńka\Pulpit\Fix.reg [2010-06-30 21:58:44 | 000,025,088 | ---- | C] () -- C:\Documents and Settings\Basieńka\Moje dokumenty\GRAFIK LIPIEC.xls [2010-06-30 11:08:54 | 000,026,112 | ---- | C] () -- C:\Documents and Settings\Basieńka\Moje dokumenty\Kopia Koszalin-grafik_lipiec2010.xls [2010-06-28 21:57:46 | 000,001,411 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\AVG Free 9.0.lnk [2010-06-28 21:57:39 | 000,113,461 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\iavichjw.avm [2010-06-28 21:57:35 | 061,677,838 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm [2010-06-28 21:18:45 | 000,002,289 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Nero StartSmart.lnk [2009-02-05 20:39:29 | 000,162,304 | ---- | C] () -- C:\WINDOWS\System32\ztvunrar36.dll [2009-02-05 20:39:29 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\UNRAR3.dll [2009-02-05 20:39:29 | 000,077,312 | ---- | C] () -- C:\WINDOWS\System32\ztvunace26.dll [2009-02-05 20:39:29 | 000,075,264 | ---- | C] () -- C:\WINDOWS\System32\unacev2.dll [2008-11-14 12:21:48 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI [2007-12-03 21:12:24 | 000,000,038 | ---- | C] () -- C:\WINDOWS\AviSplitter.INI [2007-10-30 18:36:46 | 000,000,066 | ---- | C] () -- C:\WINDOWS\mxreader.INI [2007-10-30 18:36:25 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\fmt_jb2.dll [2007-10-30 18:36:25 | 000,018,944 | ---- | C] () -- C:\WINDOWS\System32\fmt_xcx.dll [2007-10-30 18:36:25 | 000,017,920 | ---- | C] () -- C:\WINDOWS\System32\xc_local.dll [2007-10-30 18:36:25 | 000,011,264 | ---- | C] () -- C:\WINDOWS\System32\fmt_xmf.dll [2007-10-30 18:36:10 | 000,001,965 | R--- | C] () -- C:\WINDOWS\BTI.INI [2007-08-13 16:28:50 | 000,000,022 | ---- | C] () -- C:\WINDOWS\fakt.ini [2007-01-26 19:54:22 | 000,000,017 | ---- | C] () -- C:\WINDOWS\Missing.ini [2007-01-13 19:03:58 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2007-01-06 13:14:37 | 000,000,173 | ---- | C] () -- C:\WINDOWS\RtlRack.ini [2007-01-06 01:52:04 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2007-01-06 01:52:02 | 000,006,144 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2007-01-06 01:52:02 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2006-12-08 13:50:14 | 000,217,088 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2006-12-08 13:47:54 | 001,159,168 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2006-12-08 11:52:01 | 000,012,288 | ---- | C] () -- C:\WINDOWS\impborl.dll [2006-12-08 11:32:39 | 000,000,164 | R--- | C] () -- C:\WINDOWS\avrack.ini [2006-12-08 11:32:36 | 000,156,672 | R--- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2006-12-08 04:55:14 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2005-09-23 07:27:00 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2005-09-23 07:27:00 | 001,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2005-09-23 07:27:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2005-09-23 07:27:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2005-09-23 07:27:00 | 000,043,008 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll [2005-02-17 10:07:48 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\ATKACPI.sys [2004-11-24 07:38:18 | 000,007,424 | ---- | C] () -- C:\WINDOWS\System32\drivers\MMIOPORT.SYS [2004-11-24 07:38:18 | 000,002,538 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2004-08-28 12:03:58 | 002,012,672 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll [2004-08-28 12:00:30 | 000,395,264 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll [2004-08-28 11:40:48 | 000,071,168 | ---- | C] () -- C:\WINDOWS\System32\ff_tremor.dll [2004-08-28 11:40:41 | 000,167,936 | ---- | C] () -- C:\WINDOWS\System32\ff_libdts.dll [2004-08-28 11:40:39 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\ff_samplerate.dll [2004-08-28 11:40:19 | 000,044,032 | ---- | C] () -- C:\WINDOWS\System32\ff_liba52.dll [2004-08-28 11:39:38 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\ff_libmad.dll [2002-10-15 23:54:04 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2002-10-06 18:42:58 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll [2002-10-04 23:04:26 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\VorbisEnc.dll [2002-10-04 23:04:26 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll [2002-10-04 23:04:18 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll [1997-11-17 17:13:16 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll [color=#E56717]========== LOP Check ==========[/color] [2007-08-13 16:11:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\nabocorp [2008-04-18 15:45:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2008-09-02 17:21:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\phenomedia [2008-10-12 11:45:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2008-11-27 17:54:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\2730D [2008-11-28 12:42:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\322CE [2008-11-28 20:39:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\1033C [2008-12-01 13:31:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\337D [2008-12-03 19:13:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\33196 [2008-12-22 16:49:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\72E [2008-12-22 21:20:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\7271 [2009-01-01 23:02:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\2025F [2009-01-01 23:16:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\0167 [2009-01-02 14:30:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\0261 [2009-01-04 11:39:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\33261 [2009-01-05 10:57:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\18399 [2009-01-06 17:01:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\1F2DE [2009-01-07 19:23:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\B9C [2009-01-16 13:03:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\2A7D [2009-01-19 20:00:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\34222 [2009-02-05 20:39:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Simply Super Software [2009-03-01 19:45:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\2F261 [2009-03-09 09:49:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\229C [2009-03-09 09:53:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\8290 [2009-03-15 22:07:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\3933C [2009-03-16 15:18:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\3635B [2009-03-19 09:22:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\13261 [2009-03-26 10:40:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\629F [2009-03-26 22:39:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\9242 [2009-03-27 17:11:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\34109 [2009-03-27 20:06:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\7CB [2009-03-28 10:15:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\333A2 [2009-04-01 23:17:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\1138A [2009-04-07 00:10:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\272CE [2009-04-12 16:48:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\3B35B [2009-05-07 14:43:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\1F7D [2009-05-23 20:10:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\36290 [2009-06-08 19:14:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\1138B [2009-06-08 23:41:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\230D [2009-06-09 09:08:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\3213 [2009-06-13 14:53:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\2DF [2009-07-29 22:57:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AlawarWrapper [2009-07-30 19:29:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Odlotowa Farma [2010-02-24 20:56:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2010-02-24 20:56:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2010-05-12 22:46:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\162E [2010-05-22 13:05:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2010-06-28 21:57:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\avg9 [2010-07-06 21:43:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Diskeeper Corporation [2007-02-10 19:34:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\PTV Game [2007-02-16 21:45:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\Artweaver [2007-02-24 17:54:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\IrfanView [2007-10-30 18:25:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\Simple Star [2008-09-23 11:53:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\iPlus [2008-09-23 17:20:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\Gadu-Gadu [2008-10-12 11:45:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\ipla [2008-10-18 00:23:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\Leadertech [2008-10-22 21:20:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\BearShare [2009-01-01 20:53:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\BITS [2009-01-03 13:36:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\Nowe Gadu-Gadu [2009-02-05 20:39:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\Simply Super Software [2009-07-22 14:32:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\BESTplayer [2010-02-24 20:55:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\Gadu-Gadu 10 [2010-02-24 20:56:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\OpenFM [2010-03-05 18:36:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\bearsharemediabartb [2010-03-05 18:45:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\searchqutb [2010-05-22 13:05:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\DAEMON Tools Lite [color=#E56717]========== Purity Check ==========[/color] < End of report >

http://wklej.org/id/361206/

http://wklej.org/id/361207/

http://wklej.org/id/361208/

**Posty:** 2183 · przez **NieWiem** 06 Lip 2010, 22:37

= = = = = O T L = = = = =

Uruchom OTL

W oknie na dole wklej:

Kod: Zaznacz wszystko: :processes killallprocesses :services :otl FF - prefs.js..browser.search.defaultthis.engineName: "Games Bar 2 Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2452477&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.order.1: "BearShare Web Search" FF - prefs.js..extensions.enabledItems: {7FF99715-3016-4381-84CE-E4E4C9673020}:1.0 FF - prefs.js..extensions.enabledItems: {E84D42CA-64EB-11DE-A65F-8C3656D89593}:3.1 [2010-03-05 18:45:02 | 000,000,000 | ---D | M] (Searchqu Toolbar) -- C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020} [2010-03-05 18:36:26 | 000,000,000 | ---D | M] (MediaBar) -- C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593} [2010-05-22 13:06:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\DTToolbar@toolbarnet.com O3 - HKLM\..\Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O4 - HKLM..\Run: [DataMngr] C:\PROGRA~1\BEARSH~1\MEDIABAR\\DATAMNGR\DataMngrUI.exe () [2008-11-27 17:54:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\2730D [2008-11-28 12:42:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\322CE [2008-11-28 20:39:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\1033C [2008-12-01 13:31:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\337D [2008-12-03 19:13:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\33196 [2008-12-22 16:49:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\72E [2008-12-22 21:20:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\7271 [2009-01-01 23:02:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\2025F [2009-01-01 23:16:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\0167 [2009-01-02 14:30:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\0261 [2009-01-04 11:39:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\33261 [2009-01-05 10:57:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\18399 [2009-01-06 17:01:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\1F2DE [2009-01-07 19:23:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\B9C [2009-01-16 13:03:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\2A7D [2009-01-19 20:00:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\34222 [2009-03-01 19:45:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\2F261 [2009-03-09 09:49:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\229C [2009-03-09 09:53:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\8290 [2009-03-15 22:07:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\3933C [2009-03-16 15:18:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\3635B [2009-03-19 09:22:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\13261 [2009-03-26 10:40:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\629F [2009-03-26 22:39:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\9242 [2009-03-27 17:11:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\34109 [2009-03-27 20:06:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\7CB [2009-03-28 10:15:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\333A2 [2009-04-01 23:17:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\1138A [2009-04-07 00:10:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\272CE [2009-04-12 16:48:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\3B35B [2009-05-07 14:43:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\1F7D [2009-05-23 20:10:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\36290 [2009-06-08 19:14:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\1138B [2009-06-08 23:41:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\230D [2009-06-09 09:08:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\3213 [2009-06-13 14:53:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\2DF [2010-05-12 22:46:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\162E :files C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\searchplugins\daemon-search.xml :reg :commands [purity] [emptytemp] [emptyflash]

Wciśnij Run Fix (Wykonaj skrypt) i zatwierdź restart

Do wglądu raport z czyszczenia i nowy log z OTL

**Posty:** 72 · przez **17rafal** 06 Lip 2010, 23:33

Kod: Zaznacz wszystko: All processes killed ========== PROCESSES ========== ========== SERVICES/DRIVERS ========== ========== OTL ========== Prefs.js: "Games Bar 2 Customized Web Search" removed from browser.search.defaultthis.engineName Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2452477&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl Prefs.js: "BearShare Web Search" removed from browser.search.order.1 Prefs.js: {7FF99715-3016-4381-84CE-E4E4C9673020}:1.0 removed from extensions.enabledItems Prefs.js: {E84D42CA-64EB-11DE-A65F-8C3656D89593}:3.1 removed from extensions.enabledItems C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\searchbar folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\options folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\css folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\css folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217 folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257 folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255 folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227 folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\modules folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\data\search folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\data folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\components folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020} folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\searchbar folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\options folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\icons folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\css folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\css folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217 folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227 folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\modules folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\lib folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\data\search folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\data folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\components folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593} folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\DTToolbar@toolbarnet.com\components\Resources folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\DTToolbar@toolbarnet.com\components folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\DTToolbar@toolbarnet.com\chrome folder moved successfully. C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\extensions\DTToolbar@toolbarnet.com folder moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\DataMngr deleted successfully. File move failed. C:\PROGRA~1\BEARSH~1\MEDIABAR\\DATAMNGR\DataMngrUI.exe scheduled to be moved on reboot. C:\Documents and Settings\All Users\Dane aplikacji\2730D folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\322CE folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\1033C folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\337D folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\33196 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\72E folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\7271 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\2025F folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\0167 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\0261 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\33261 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\18399 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\1F2DE folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\B9C folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\2A7D folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\34222 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\2F261 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\229C folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\8290 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\3933C folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\3635B folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\13261 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\629F folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\9242 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\34109 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\7CB folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\333A2 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\1138A folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\272CE folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\3B35B folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\1F7D folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\36290 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\1138B folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\230D folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\3213 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\2DF folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\162E folder moved successfully. ========== FILES ========== C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\searchplugins\daemon-search.xml moved successfully. ========== REGISTRY ========== ========== COMMANDS ========== [EMPTYTEMP] User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: All Users User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Basieńka ->Temp folder emptied: 286606 bytes ->Temporary Internet Files folder emptied: 34481 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 38503468 bytes ->Flash cache emptied: 1054 bytes User: Downloads User: Dokuments User: profiles %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 16384 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 37,00 mb [EMPTYFLASH] User: Default User ->Flash cache emptied: 0 bytes User: All Users User: NetworkService User: LocalService User: Basieńka ->Flash cache emptied: 0 bytes User: Downloads User: Dokuments User: profiles Total Flash Files Cleaned = 0,00 mb OTL by OldTimer - Version 3.2.7.1 log created on 07062010_231811 Files\Folders moved on Reboot... File move failed. C:\PROGRA~1\BEARSH~1\MEDIABAR\\DATAMNGR\DataMngrUI.exe scheduled to be moved on reboot. Registry entries deleted on Reboot...

http://wklej.org/id/361259/

http://wklej.org/id/361260/

**Posty:** 2183 · przez **NieWiem** 06 Lip 2010, 23:42

Ręcznie wyszukaj i usuń plik:

C:\Documents and Settings\Basieńka\Dane aplikacji\Mozilla\Firefox\Profiles\l51p77nq.default\searchplugins\conduit.xml

Teraz możecie się zająć jakąś optymalizacją, a faktycznie by się przydała.

**Posty:** 72 · przez **17rafal** 08 Lip 2010, 19:08

co polecacie w zrobieniu tej optymalizacji?

**Posty:** 18165 · przez **wojtas** 08 Lip 2010, 19:54

1.Uruchom OTL z opcji sprzątanie.
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
4. zrób skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie )

Zaktualizuj zabezpieczenia:
>>> Adobe Reader 9.3 (bez Free McAfee® Security Scan Plus)
>>> Java™ 6 Update 21
>>> Mozilla Firefox

**Posty:** 72 · przez **17rafal** 08 Lip 2010, 21:26

zrobilem to co napisales, ale nie wiem czy to cos pomoglo, antywirus nic nie znalazl, co jeszcze moge zrobic?

**Posty:** 18165 · przez **wojtas** 09 Lip 2010, 19:38

nic bo już nic nie ma,

Kto jest na forum