mój log z prośbą o pomoc..

**Posty:** 6 · przez **ManiPt** 25 Lis 2005, 04:04

Witam serdecznie. Po krótce opiszę swój problem. Otóż korzystam FireFoxa i od niedawna mam problem z uporczywymi oknami Pop Up.... Wyskakują one bez mojej wiedzy, podczas gry zarówno sieciowej jak i normalnej. Myśląc że jest to jakiś spy ware, zainstalowałem program Ad-Aware SE Professional, ale mimo wykrycia i usunięcia tych plików problem nie zniknął. Byłbym bardzo wdzięczny za udzieloną pomoc. Pozdrawiam

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 02:46:57, on 2005-11-25 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\rundll32.exe E:\AVPERSONAL\AVGUARD.EXE C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\Explorer.EXE e:\AVPersonal\AVWUPSRV.EXE C:\WINDOWS\TWF0aQAA\command.exe C:\WINDOWS\system32\nvsvc32.exe E:\AVPersonal\AVGNT.EXE D:\powerstrip\pstrip.exe C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Konnekt\konnekt.exe D:\steam\steam.exe C:\Program Files\Ad-Aware SE Professional\Ad-Watch.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\PROGRA~1\MOZILL~1\FIREFOX.EXE E:\English.Translator.3.1.PL.RiP-ALC\HandyDict.exe E:\Winamp\winamp.exe E:\Downloads\hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.findthewebsiteyouneed.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.findthewebsiteyouneed.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbar.findthewebsiteyouneed.com R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - E:\FLASHGET\jccatch.dll O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O4 - HKLM\..\Run: [AVGCtrl] E:\AVPersonal\AVGNT.EXE /min O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [PowerStrip] d:\powerstrip\pstrip.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM O4 - HKLM\..\Run: [sp2update] C:\windows\sp2update00.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Konnekt] "C:\Program Files\Konnekt\konnekt.exe" /autostart O4 - HKCU\..\Run: [Steam] "d:\steam\steam.exe" -silent O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1 O4 - HKCU\..\Run: [AWMON] "C:\Program Files\Ad-Aware SE Professional\Ad-Watch.exe" O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Ściągnij przy pomocy FlashGet'a - E:\FlashGet\jc_link.htm O8 - Extra context menu item: Ściągnij wszystko przy pomocy FlashGet'a - E:\FlashGet\jc_all.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - e:\ICQLite\ICQLite.exe (file missing) O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - e:\ICQLite\ICQLite.exe (file missing) O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\FLASHGET\flashget.exe O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\FLASHGET\flashget.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O20 - Winlogon Notify: StillImage - C:\WINDOWS\system32\q0nu0a59ed.dll O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - E:\AVPERSONAL\AVGUARD.EXE O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - e:\AVPersonal\AVWUPSRV.EXE O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\TWF0aQAA\command.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

**Posty:** 1083 · przez numerant* 25 Lis 2005, 12:32

Kod: Zaznacz wszystko: R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.findthewebsiteyouneed.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.findthewebsiteyouneed.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbar.findthewebsiteyouneed.com

to trzeba usunąć

nie jestem pewien co do innych wpisów więc podaję tylko to.

PZDR

**Posty:** 6 · przez **ManiPt** 25 Lis 2005, 20:37

Tak tylko ze jest pewien problem. Jak klikam na Fix checked , pozniej na Yes to niby wszsytko usuwa, ale po chwili gdy robię ponownie skana okazuje sie ze wcale tego nie usunęło.
W host file manager'ze tez mam duzo jakis dziwnych adresow, ale ich również nie mogę usunąc :|
Przykład:

Kod: Zaznacz wszystko: 127.0.0.1 code.ignphrases.com 127.0.0.1 clear-search.com 127.0.0.1 r1.clrsch.com 127.0.0.1 sds.clrsch.com 127.0.0.1 status.clrsch.com 127.0.0.1 www.clrsch.com 127.0.0.1 clr-sch.com 127.0.0.1 sds-qckads.com 127.0.0.1 xads.offeroptimizer.comm 127.0.0.1 search.offeroptimizer.com 127.0.0.1 ximages.offeroptimizer.com 127.0.0.1 xlime.offeroptimizer.com 127.0.0.1 xadsj-o.offeroptimizer.com 127.0.0.1 xadsj.offeroptimizer.com 127.0.0.1 www.offeroptimizer.com 127.0.0.1 as.adwave.com 127.0.0.1 sr.adwave.com 127.0.0.1 www.adwave.com 127.0.0.1 adwave.com EVENT:HOST:127.0.0.1 127.0.0.1 www.pacimedia.com 127.0.0.1 www.igetnet.com 127.0.0.1 status.qckads.com 127.0.0.1 www.qoolaid.com 127.0.0.1 www.qoologic.com 127.0.0.1 www.CLKPrecision.com 127.0.0.1 www.urllogic.com 127.0.0.1 www.clkoptimizer.com 127.0.0.1 www.isearch.com 127.0.0.1 isearch.com 127.0.0.1 www.idownload.com 127.0.0.1 idownload.com 127.0.0.1 www.mytotalsearch.com 127.0.0.1 mytotalsearch.com 127.0.0.1 www.lop.com 127.0.0.1 lop.com 127.0.0.1 www.websearch.com 127.0.0.1 websearch.com 127.0.0.1 www.page-not-found.net 127.0.0.1 page-not-found.net 127.0.0.1 www.isearchhere.com 127.0.0.1 isearchhere.com 127.0.0.1 www.pacimedia.com

Proszę, pomóżcie...

**Posty:** 8694 · przez **Red** 25 Lis 2005, 20:59

1. Sciagnij i uruchom (wypakuj) programik http://www.atribune.org/downloads/l2mfix.exe
odlacz sie od netu all
2. Odpal go przez l2mfix.bat z jego folderu
3. Uruchom w nim opcje 2 - Run fix
4. Czekaj cierpliwie na zakonczenie i nie przejmuj sie "wywaleniem" pulpitu
5. Pokaz log ktory dostaniesz po zakonczeniu
6. Pokaz log z HJ

**Posty:** 6 · przez **ManiPt** 25 Lis 2005, 21:30

Kod: Zaznacz wszystko: L2MFIX find log 1.99 These are the registry keys present ********************************************************************************** Winlogon/notify: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Internet Settings] "Asynchronous"=dword:00000000 "DllName"="C:\\WINDOWS\\system32\\ir0ml5d11.dll" "Impersonate"=dword:00000000 "Logon"="WinLogon" "Logoff"="WinLogoff" "Shutdown"="WinShutdown" RegDACL 5.1 - Permissions Manager for Registry keys for Windows NT 4 and above Copyright (c) 1999-2001 Frank Heyne Software (http://www.heysoft.de) This program is Freeware, use it on your own risk! Access Control List for Registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify: (NI) ALLOW Full access ZARZ¤DZANIE NT\SYSTEM (IO) ALLOW Full access ZARZ¤DZANIE NT\SYSTEM (ID-NI) ALLOW Read BUILTIN\Uľytkownicy (ID-IO) ALLOW Read BUILTIN\Uľytkownicy (ID-NI) ALLOW Read BUILTIN\Uľytkownicy zaawansowani (ID-IO) ALLOW Read BUILTIN\Uľytkownicy zaawansowani (ID-NI) ALLOW Full access BUILTIN\Administratorzy (ID-IO) ALLOW Full access BUILTIN\Administratorzy (ID-NI) ALLOW Full access ZARZ¤DZANIE NT\SYSTEM (ID-IO) ALLOW Full access ZARZ¤DZANIE NT\SYSTEM (ID-IO) ALLOW Full access TWŕRCA-WťA—CICIEL ********************************************************************************** useragent: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform] "{27A5C30E-A4EE-7F94-40B4-C41A63AF1A5A}"="" ********************************************************************************** Shell Extension key: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] "{00022613-0000-0000-C000-000000000046}"="Karta wˆa˜ciwo˜ci pliku multimedialnego" "{176d6597-26d3-11d1-b350-080036a75b03}"="ZarzĄdzanie skanerem ICM" "{1F2E5C40-9550-11CE-99D2-00AA006E086C}"="Strona zabezpieczeä NTFS" "{3EA48300-8CF6-101B-84FB-666CCB9BCD32}"="Strona wˆa˜ciwo˜ci OLE Docfile" "{40dd6e20-7c17-11ce-a804-00aa003ca9f6}"="Rozszerzenia powˆoki dla udost©pniania zasob˘w" "{41E300E0-78B6-11ce-849B-444553540000}"="PlusPack CPL Extension" "{42071712-76d4-11d1-8b24-00a0c9068ff3}"="Rozszerzenie CPL karty graficznej" "{42071713-76d4-11d1-8b24-00a0c9068ff3}"="Rozszerzenie CPL monitora wy˜wietlania" "{42071714-76d4-11d1-8b24-00a0c9068ff3}"="Rozszerzenie CPL kadrowania wy˜wietlania" "{4E40F770-369C-11d0-8922-00A024AB2DBB}"="Strona zabezpieczeä usˆugi DS" "{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"="Strona zgodno˜ci" "{56117100-C0CD-101B-81E2-00AA004AE837}"="Program obsˆugi danych wycinkowych powˆoki" "{59099400-57FF-11CE-BD94-0020AF85B590}"="Rozszerzenie Disc Copy" "{59be4990-f85c-11ce-aff7-00aa003ca9f6}"="Rozszerzenia powˆoki dla obiekt˘w Microsoft Windows Network" "{5DB2625A-54DF-11D0-B6C4-0800091AA605}"="ZarzĄdzanie monitorem ICM" "{675F097E-4C4D-11D0-B6C1-0800091AA605}"="ZarzĄdzanie drukarkĄ ICM" "{764BF0E1-F219-11ce-972D-00AA00A14F56}"="Rozszerzenia powˆoki dla kompresji plik˘w" "{77597368-7b15-11d0-a0c2-080036af3f03}"="Rozszerzenie powˆoki drukarek sieci Web" "{7988B573-EC89-11cf-9C00-00AA00A14F56}"="Disk Quota UI" "{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}"="Menu kontekstowe szyfrowania" "{85BBD920-42A0-1069-A2E4-08002B30309D}"="Akt˘wka" "{88895560-9AA2-1069-930E-00AA0030EBC8}"="Rozszerzenie ikony HyperTerminalu" "{BD84B380-8CA2-1069-AB1D-08000948F534}"="Fonts" "{DBCE2480-C732-101B-BE72-BA78E9AD5B27}"="Profil ICC" "{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}"="Strona zabezpieczeä drukarek" "{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"="Rozszerzenia powˆoki dla udost©pniania zasob˘w" "{f92e8c40-3d33-11d2-b1aa-080036a75b03}"="Display TroubleShoot CPL Extension" "{7444C717-39BF-11D1-8CD9-00C04FC29D45}"="Rozszerzenie Crypto PKO" "{7444C719-39BF-11D1-8CD9-00C04FC29D45}"="Rozszerzenie Crypto Sign" "{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="PoˆĄczenia sieciowe" "{992CFFA0-F557-101A-88EC-00DD010CCC48}"="PoˆĄczenia sieciowe" "{E211B736-43FD-11D1-9EFB-0000F8757FCD}"="&Skanery i aparaty fotograficzne" "{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}"="&Skanery i aparaty fotograficzne" "{905667aa-acd6-11d2-8080-00805f6596d2}"="&Skanery i aparaty fotograficzne" "{3F953603-1008-4f6e-A73A-04AAC7A992F1}"="&Skanery i aparaty fotograficzne" "{83bbcbf3-b28a-4919-a5aa-73027445d672}"="&Skanery i aparaty fotograficzne" "{F0152790-D56E-4445-850E-4F3117DB740C}"="Remote Sessions CPL Extension" "{60254CA5-953B-11CF-8C96-00AA00B8708C}"="Rozszerzenia powˆoki dla hosta skrypt˘w systemu Windows" "{2206CDB2-19C1-11D1-89E0-00C04FD7A829}"="Microsoft Data Link" "{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Icon Handler" "{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Shell Extension" "{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="Zaplanowane zadania" "{2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}"="Set Program Access and Defaults" "{5F327514-6C5E-4d60-8F16-D07FA08A78ED}"="Auto Update Property Sheet Extension" "{0DF44EAA-FF21-4412-828E-260A8728E7F1}"="Pasek zadaä i menu Start" "{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}"="Wyszukaj" "{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}"="Pomoc i obsˆuga techniczna" "{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}"="Pomoc i obsˆuga techniczna" "{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}"="Uruchom..." "{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}"="Internet" "{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}"="E-mail" "{D20EA4E1-3957-11d2-A40B-0C5020524152}"="Czcionki" "{D20EA4E1-3957-11d2-A40B-0C5020524153}"="Narz©dzia administracyjne" "{596AB062-B4D2-4215-9F74-E9109B0A8153}"="Strona wˆa˜ciwo˜ci Poprzednie wersje" "{9DB7A13C-F208-4981-8353-73CC61AE2783}"="Poprzednie wersje" "{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}"="Audio Media Properties Handler" "{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}"="Video Media Properties Handler" "{E4B29F9D-D390-480b-92FD-7DDB47101D71}"="Wav Properties Handler" "{87D62D94-71B3-4b9a-9489-5FE6850DC73E}"="Avi Properties Handler" "{A6FD9E45-6E44-43f9-8644-08598F5A74D9}"="Midi Properties Handler" "{c5a40261-cd64-4ccf-84cb-c394da41d590}"="Video Thumbnail Extractor" "{5E6AB780-7743-11CF-A12B-00AA004AE837}"="Pasek narz©dzi programu Microsoft Internet" "{22BF0C20-6DA7-11D0-B373-00A0C9034938}"="Stan pobierania" "{91EA3F8B-C99B-11d0-9815-00C04FD91972}"="Folder powˆoki zwi©kszonej" "{6413BA2C-B461-11d1-A18A-080036B11A03}"="Folder powˆoki zwi©kszonej 2" "{F61FFEC1-754F-11d0-80CA-00AA005B4383}"="BandProxy" "{7BA4C742-9E81-11CF-99D3-00AA004AE837}"="Pasek przeglĄdarki Microsoft" "{30D02401-6A81-11d0-8274-00C04FD5AE38}"="Pasek wyszukiwania" "{169A0691-8DF9-11d1-A1C4-00C04FD75D13}"="Wyszukiwanie w okienku" "{07798131-AF23-11d1-9111-00A0C98BA67D}"="Wyszukiwanie w sieci Web" "{AF4F6510-F982-11d0-8595-00AA004CD6D8}"="Narz©dzie opcji drzewa rejestru" "{01E04581-4EEE-11d0-BFE9-00AA005B4383}"="&Adres" "{A08C11D2-A228-11d0-825B-00AA005B4383}"="Pole edycji adresu" "{00BB2763-6A77-11D0-A535-00C04FD7D062}"="Autouzupeˆnianie Microsoft" "{7376D660-C583-11d0-A3A5-00C04FD706EC}"="Wyodr©bnianie obraz˘w Trident" "{6756A641-DE71-11d0-831B-00AA005B4383}"="Lista autouzupeˆniania MRU" "{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}"="Niestandardowa lista autouzupeˆniania MRU" "{7e653215-fa25-46bd-a339-34a2790f3cb7}"="Dost©pny" "{acf35015-526e-4230-9596-becbe19f0ac9}"="Pasek podr©czny ˜ledzenia" "{00BB2764-6A77-11D0-A535-00C04FD7D062}"="Lista autouzupeˆniania historii Microsoft" "{03C036F1-A186-11D0-824A-00AA005B4383}"="Lista autouzupeˆniania folderu powˆoki Microsoft" "{00BB2765-6A77-11D0-A535-00C04FD7D062}"="Kontener wielu list autouzupeˆniania Microsoft" "{ECD4FC4E-521C-11D0-B792-00A0C90312E1}"="Menu witryny paska powˆoki" "{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}"="Shell DeskBarApp" "{ECD4FC4C-521C-11D0-B792-00A0C90312E1}"="Pasek pulpitu powˆoki" "{ECD4FC4D-521C-11D0-B792-00A0C90312E1}"="Shell Rebar BandSite" "{DD313E04-FEFF-11d1-8ECD-0000F87A470C}"="Pomoc dla uľytkownika" "{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}"="Globalne ustawienia folder˘w" "{EFA24E61-B078-11d0-89E4-00C04FC9E26E}"="Favorites Band" "{0A89A860-D7B1-11CE-8350-444553540000}"="Shell Automation Inproc Service" "{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}"="Shell DocObject Viewer" "{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}"="Microsoft Browser Architecture" "{FBF23B40-E3F0-101B-8488-00AA003E56F8}"="InternetShortcut" "{3C374A40-BAE4-11CF-BF7D-00AA006946EE}"="Microsoft Url History Service" "{FF393560-C2A7-11CF-BFF4-444553540000}"="Historia" "{7BD29E00-76C1-11CF-9DD0-00A0C9034933}"="Tymczasowe pliki internetowe" "{7BD29E01-76C1-11CF-9DD0-00A0C9034933}"="Tymczasowe pliki internetowe" "{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"="Microsoft Url Search Hook" "{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}"="Ekran powitalny pakietu IE4" "{67EA19A0-CCEF-11d0-8024-00C04FD75D13}"="CDF Extension Copy Hook" "{131A6951-7F78-11D0-A979-00C04FD705A2}"="ISFBand OC" "{9461b922-3c5a-11d2-bf8b-00c04fb93661}"="Search Assistant OC" "{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}"="Internet" "{871C5380-42A0-1069-A2EA-08002B30309D}"="Internet Name Space" "{EFA24E64-B078-11d0-89E4-00C04FC9E26E}"="Pasek eksploratora" "{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service" "{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service" "{88C6C381-2E85-11D0-94DE-444553540000}"="Folder pami©ci podr©cznej ActiveX" "{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"="WebCheck" "{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}"="Subscription Mgr" "{F5175861-2688-11d0-9C5E-00AA00A45957}"="Folder subskrypcji" "{08165EA0-E946-11CF-9C87-00AA005127ED}"="WebCheckWebCrawler" "{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}"="WebCheckChannelAgent" "{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}"="TrayAgent" "{7D559C10-9FE9-11d0-93F7-00AA0059CE02}"="Code Download Agent" "{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}"="ConnectionAgent" "{D8BD2030-6FC9-11D0-864F-00AA006809D9}"="PostAgent" "{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}"="WebCheck SyncMgr Handler" "{352EC2B7-8B9A-11D1-B8AE-006008059382}"="Menedľer aplikacji powˆoki" "{0B124F8F-91F0-11D1-B8B5-006008059382}"="Wyliczanie zainstalowanych aplikacji" "{CFCCC7A0-A282-11D1-9082-006008059382}"="Publikator aplikacji Darwin" "{e84fda7c-1d6a-45f6-b725-cb260c236066}"="Shell Image Verbs" "{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}"="Shell Image Data Factory" "{00E7B358-F65B-4dcf-83DF-CD026B94BFD4}"="Autoplay for SlideShow" "{3F30C968-480A-4C6C-862D-EFC0897BB84B}"="GDI+program wyodr©bniajĄcy miniatury plik˘w" "{9DBD2C50-62AD-11d0-B806-00C04FD706EC}"="Informacje podsumowujĄce obsˆugi miniatur (DOCFILES)" "{EAB841A0-9550-11cf-8C16-00805F1408F3}"="Wyodr©bnianie miniatur HTML" "{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}"="Shell Image Property Handler" "{CC6EEFFB-43F6-46c5-9619-51D571967F7D}"="Kreator publikacji w sieci Web" "{add36aa8-751a-4579-a266-d66f5202ccbb}"="Zamawianie odbitek w sieci Web" "{6b33163c-76a5-4b6c-bf21-45de9cd503a1}"="Obiekt powˆoki kreatora publikacji" "{58f1f272-9240-4f51-b6d4-fd63d1618591}"="Kreator uzyskiwania profilu usˆugi Passport" "{7A9D77BD-5403-11d2-8785-2E0420524153}"="Konta uľytkownik˘w" "{BD472F60-27FA-11cf-B8B4-444553540000}"="Compressed (zipped) Folder Right Drag Handler" "{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}"="Compressed (zipped) Folder SendTo Target" "{f39a0dc0-9cc8-11d0-a599-00c04fd64433}"="Plik kanaˆu" "{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}"="Skr˘t kanaˆu" "{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}"="Obiekt obsˆugi kanaˆu" "{f3da0dc0-9cc8-11d0-a599-00c04fd64437}"="Channel Menu" "{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}"="Channel Properties" "{692F0339-CBAA-47e6-B5B5-3B84DB604E87}"="Extensions Manager Folder" "{63da6ec0-2e98-11cf-8d82-444553540000}"="FTP Folders Webview" "{883373C3-BF89-11D1-BE35-080036B11A03}"="Microsoft DocProp Shell Ext" "{A9CF0EAE-901A-4739-A481-E35B73E47F6D}"="Microsoft DocProp Inplace Edit Box Control" "{8EE97210-FD1F-4B19-91DA-67914005F020}"="Microsoft DocProp Inplace ML Edit Box Control" "{0EEA25CC-4362-4A12-850B-86EE61B0D3EB}"="Microsoft DocProp Inplace Droplist Combo Control" "{6A205B57-2567-4A2C-B881-F787FAB579A3}"="Microsoft DocProp Inplace Calendar Control" "{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}"="Microsoft DocProp Inplace Time Control" "{8A23E65E-31C2-11d0-891C-00A024AB2DBB}"="Directory Query UI" "{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}"="Shell properties for a DS object" "{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}"="Directory Object Find" "{F020E586-5264-11d1-A532-0000F8757D7E}"="Directory Start/Search Find" "{0D45D530-764B-11d0-A1CA-00AA00C16E65}"="Directory Property UI" "{62AE1F9A-126A-11D0-A14B-0800361B1103}"="Directory Context Menu Verbs" "{ECF03A33-103D-11d2-854D-006008059367}"="MyDocs Copy Hook" "{ECF03A32-103D-11d2-854D-006008059367}"="MyDocs Drop Target" "{4a7ded0a-ad25-11d0-98a8-0800361b1103}"="MyDocs Properties" "{750fdf0e-2a26-11d1-a3ea-080036587f03}"="Offline Files Menu" "{10CFC467-4392-11d2-8DB4-00C04FA31A66}"="Offline Files Folder Options" "{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}"="Folder plik˘w trybu offline" "{143A62C8-C33B-11D1-84FE-00C04FA34A14}"="Microsoft Agent Character Property Sheet Handler" "{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}"="DfsShell" "{60fd46de-f830-4894-a628-6fa81bc0190d}"="%DESC_PublishDropTarget%" "{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"="MMC Icon Handler" "{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}"=".CAB file viewer" "{32714800-2E5F-11d0-8B85-00AA0044F941}"="&Do os˘b..." "{8DD448E6-C188-4aed-AF92-44956194EB1F}"="Windows Media Player Play as Playlist Context Menu Handler" "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"="Windows Media Player Burn Audio CD Context Menu Handler" "{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}"="Windows Media Player Add to Playlist Context Menu Handler" "{A70C977A-BF00-412C-90B7-034C51DA2439}"="NvCpl DesktopContext Class" "{1CDB2949-8F65-4355-8456-263E7C208A5D}"="Desktop Explorer" "{1E9B04FB-F9E5-4718-997B-B8DA88302A47}"="Desktop Explorer Menu" "{1E9B04FB-F9E5-4718-997B-B8DA88302A48}"="nView Desktop Context Menu" "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"="WinRAR shell extension" "{32020A01-506E-484D-A2A8-BE3CF17601C3}"="AlcoholShellEx" "{BDEADF00-C265-11D0-BCED-00A0C90AB50F}"="Foldery w sieci Web" "{42042206-2D85-11D3-8CFF-005004838597}"="Microsoft Office HTML Icon Handler" "{73B24247-042E-4EF5-ADC2-42F62E6FD654}"="ICQ Lite Shell Extension" "{3A509B4B-DF42-4C61-AA59-FED1E4E52A6D}"="" "{86178C98-3148-4C0D-8571-B8C95ED8504F}"="" "{2E659F63-BB8A-4DD1-B791-D2E1E634FC74}"="" "{AF4AE24D-F5DB-4BF3-96E8-981E1D804EDE}"="" "{94865A37-6166-4F8F-8FC9-51D819A15210}"="" "{495C8515-A974-4168-B4FD-2B6E11A8DB81}"="" "{A3B71691-6C69-4571-9E23-F9FCC2DCE4DC}"="" "{EBAFF7BA-E17C-4FFE-AC1E-A6376E349198}"="" "{C190C81F-304A-4216-8BF7-E4AA818A700F}"="" "{7B454A88-1788-43B1-A63C-A9C5FCC3C88E}"="" "{1143CF21-BFBB-4F48-8F18-64A628376476}"="" "{2CE455B2-2783-4916-921D-F35D01F27437}"="" "{472083B0-C522-11CF-8763-00608CC02F24}"="avast" "{01AD43DA-CF38-48FC-9EA0-806233AD0468}"="" "{A5023E41-6005-427E-9572-EACA25C1663C}"="" "{A22684C9-0CF6-4915-8148-43C7C805751D}"="" "{A30AF5D9-45A3-4801-B959-FA1E60A66D93}"="" "{38F29F66-F1DE-4601-83EA-008FD95CC03C}"="" "{1609976A-AB11-4878-90C8-90A48DF4189A}"="" "{2BAACA8C-9EB5-4841-B91A-549CA4CCECFB}"="" "{E010497D-E349-44B7-86E7-58B94AA9FCE9}"="" "{E7B74760-631B-408C-B65F-3BDFFA9F63B7}"="" "{C37E3988-ECDE-4D0B-8036-E11DB258148B}"="" "{3C1AC895-5441-40B9-A6C5-453F19F02668}"="" "{5A6618CA-7473-4A66-AF6A-CC69E319909D}"="" "{FB2F1CE3-89CB-420F-AF3F-03F401A54DCE}"="" "{97895937-98E4-47F9-A451-E68B5D7C1009}"="" "{E87DBFEA-C2E8-404A-8400-B6B293A1922C}"="" "{CBAEB75B-A528-4281-A210-ECBFC22B72E8}"="" "{38B0A28D-847B-454C-B3A9-B3DFEC263E69}"="" "{EA111BA7-F9D9-4D3B-BF24-3511BBFD123E}"="" "{FFB699E0-306A-11d3-8BD1-00104B6F7516}"="Play on my TV helper" "{6E9D2F59-874C-4282-AAC0-12D75276B2FD}"="" "{7C0F8B3E-A07B-4563-BA98-C6B532870610}"="" "{F3D74DF9-8D4F-475D-B7F2-B1ECB289531D}"="" "{F3E1A9DF-3E5A-4688-AD86-B05245CDC957}"="" "{21D6E596-B767-462F-824A-7DF4FC58170A}"="" "{D0D28F1A-9D94-46DA-AA6B-DE0532BD892B}"="" "{81623594-87F9-413F-8098-8A818AEF346C}"="" ********************************************************************************** HKEY ROOT CLASSIDS: Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{2E659F63-BB8A-4DD1-B791-D2E1E634FC74}] @="" [HKEY_CLASSES_ROOT\CLSID\{2E659F63-BB8A-4DD1-B791-D2E1E634FC74}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{2E659F63-BB8A-4DD1-B791-D2E1E634FC74}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{2E659F63-BB8A-4DD1-B791-D2E1E634FC74}\InprocServer32] @="C:\\WINDOWS\\system32\\guard.tmp" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{AF4AE24D-F5DB-4BF3-96E8-981E1D804EDE}] @="" [HKEY_CLASSES_ROOT\CLSID\{AF4AE24D-F5DB-4BF3-96E8-981E1D804EDE}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{AF4AE24D-F5DB-4BF3-96E8-981E1D804EDE}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{AF4AE24D-F5DB-4BF3-96E8-981E1D804EDE}\InprocServer32] @="C:\\WINDOWS\\system32\\ndrshe.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{94865A37-6166-4F8F-8FC9-51D819A15210}] @="" [HKEY_CLASSES_ROOT\CLSID\{94865A37-6166-4F8F-8FC9-51D819A15210}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{94865A37-6166-4F8F-8FC9-51D819A15210}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{94865A37-6166-4F8F-8FC9-51D819A15210}\InprocServer32] @="C:\\WINDOWS\\system32\\rugsvc.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{495C8515-A974-4168-B4FD-2B6E11A8DB81}] @="" [HKEY_CLASSES_ROOT\CLSID\{495C8515-A974-4168-B4FD-2B6E11A8DB81}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{495C8515-A974-4168-B4FD-2B6E11A8DB81}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{495C8515-A974-4168-B4FD-2B6E11A8DB81}\InprocServer32] @="C:\\WINDOWS\\system32\\nehwvid.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{A3B71691-6C69-4571-9E23-F9FCC2DCE4DC}] @="" [HKEY_CLASSES_ROOT\CLSID\{A3B71691-6C69-4571-9E23-F9FCC2DCE4DC}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{A3B71691-6C69-4571-9E23-F9FCC2DCE4DC}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{A3B71691-6C69-4571-9E23-F9FCC2DCE4DC}\InprocServer32] @="C:\\WINDOWS\\system32\\irpeers.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{EBAFF7BA-E17C-4FFE-AC1E-A6376E349198}] @="" [HKEY_CLASSES_ROOT\CLSID\{EBAFF7BA-E17C-4FFE-AC1E-A6376E349198}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{EBAFF7BA-E17C-4FFE-AC1E-A6376E349198}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{EBAFF7BA-E17C-4FFE-AC1E-A6376E349198}\InprocServer32] @="C:\\WINDOWS\\system32\\obbcconf.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{C190C81F-304A-4216-8BF7-E4AA818A700F}] @="" [HKEY_CLASSES_ROOT\CLSID\{C190C81F-304A-4216-8BF7-E4AA818A700F}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{C190C81F-304A-4216-8BF7-E4AA818A700F}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{C190C81F-304A-4216-8BF7-E4AA818A700F}\InprocServer32] @="C:\\WINDOWS\\system32\\guard.tmp" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{7B454A88-1788-43B1-A63C-A9C5FCC3C88E}] @="" [HKEY_CLASSES_ROOT\CLSID\{7B454A88-1788-43B1-A63C-A9C5FCC3C88E}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{7B454A88-1788-43B1-A63C-A9C5FCC3C88E}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{7B454A88-1788-43B1-A63C-A9C5FCC3C88E}\InprocServer32] @="C:\\WINDOWS\\system32\\bytsprx2.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{1143CF21-BFBB-4F48-8F18-64A628376476}] @="" [HKEY_CLASSES_ROOT\CLSID\{1143CF21-BFBB-4F48-8F18-64A628376476}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{1143CF21-BFBB-4F48-8F18-64A628376476}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{1143CF21-BFBB-4F48-8F18-64A628376476}\InprocServer32] @="C:\\WINDOWS\\system32\\mvports.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{2CE455B2-2783-4916-921D-F35D01F27437}] @="" [HKEY_CLASSES_ROOT\CLSID\{2CE455B2-2783-4916-921D-F35D01F27437}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{2CE455B2-2783-4916-921D-F35D01F27437}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{2CE455B2-2783-4916-921D-F35D01F27437}\InprocServer32] @="C:\\WINDOWS\\system32\\snvsvc.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{01AD43DA-CF38-48FC-9EA0-806233AD0468}] @="" [HKEY_CLASSES_ROOT\CLSID\{01AD43DA-CF38-48FC-9EA0-806233AD0468}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{01AD43DA-CF38-48FC-9EA0-806233AD0468}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{01AD43DA-CF38-48FC-9EA0-806233AD0468}\InprocServer32] @="C:\\WINDOWS\\system32\\ncrspt.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{A5023E41-6005-427E-9572-EACA25C1663C}] @="" [HKEY_CLASSES_ROOT\CLSID\{A5023E41-6005-427E-9572-EACA25C1663C}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{A5023E41-6005-427E-9572-EACA25C1663C}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{A5023E41-6005-427E-9572-EACA25C1663C}\InprocServer32] @="C:\\WINDOWS\\system32\\sSmsrv.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{A22684C9-0CF6-4915-8148-43C7C805751D}] @="" [HKEY_CLASSES_ROOT\CLSID\{A22684C9-0CF6-4915-8148-43C7C805751D}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{A22684C9-0CF6-4915-8148-43C7C805751D}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{A22684C9-0CF6-4915-8148-43C7C805751D}\InprocServer32] @="C:\\WINDOWS\\system32\\qrsname.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{A30AF5D9-45A3-4801-B959-FA1E60A66D93}] @="" [HKEY_CLASSES_ROOT\CLSID\{A30AF5D9-45A3-4801-B959-FA1E60A66D93}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{A30AF5D9-45A3-4801-B959-FA1E60A66D93}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{A30AF5D9-45A3-4801-B959-FA1E60A66D93}\InprocServer32] @="C:\\WINDOWS\\system32\\guard.tmp" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{38F29F66-F1DE-4601-83EA-008FD95CC03C}] @="" [HKEY_CLASSES_ROOT\CLSID\{38F29F66-F1DE-4601-83EA-008FD95CC03C}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{38F29F66-F1DE-4601-83EA-008FD95CC03C}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{38F29F66-F1DE-4601-83EA-008FD95CC03C}\InprocServer32] @="C:\\WINDOWS\\system32\\nwrstr.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{1609976A-AB11-4878-90C8-90A48DF4189A}] @="" [HKEY_CLASSES_ROOT\CLSID\{1609976A-AB11-4878-90C8-90A48DF4189A}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{1609976A-AB11-4878-90C8-90A48DF4189A}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{1609976A-AB11-4878-90C8-90A48DF4189A}\InprocServer32] @="C:\\WINDOWS\\system32\\nuwrscs.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{2BAACA8C-9EB5-4841-B91A-549CA4CCECFB}] @="" [HKEY_CLASSES_ROOT\CLSID\{2BAACA8C-9EB5-4841-B91A-549CA4CCECFB}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{2BAACA8C-9EB5-4841-B91A-549CA4CCECFB}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{2BAACA8C-9EB5-4841-B91A-549CA4CCECFB}\InprocServer32] @="C:\\WINDOWS\\system32\\dvcpcsvc.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{E010497D-E349-44B7-86E7-58B94AA9FCE9}] @="" [HKEY_CLASSES_ROOT\CLSID\{E010497D-E349-44B7-86E7-58B94AA9FCE9}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{E010497D-E349-44B7-86E7-58B94AA9FCE9}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{E010497D-E349-44B7-86E7-58B94AA9FCE9}\InprocServer32] @="C:\\WINDOWS\\system32\\mogsvc.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{E7B74760-631B-408C-B65F-3BDFFA9F63B7}] @="" [HKEY_CLASSES_ROOT\CLSID\{E7B74760-631B-408C-B65F-3BDFFA9F63B7}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{E7B74760-631B-408C-B65F-3BDFFA9F63B7}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{E7B74760-631B-408C-B65F-3BDFFA9F63B7}\InprocServer32] @="C:\\WINDOWS\\system32\\rggwizc.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{C37E3988-ECDE-4D0B-8036-E11DB258148B}] @="" [HKEY_CLASSES_ROOT\CLSID\{C37E3988-ECDE-4D0B-8036-E11DB258148B}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{C37E3988-ECDE-4D0B-8036-E11DB258148B}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{C37E3988-ECDE-4D0B-8036-E11DB258148B}\InprocServer32] @="C:\\WINDOWS\\system32\\guard.tmp" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{3C1AC895-5441-40B9-A6C5-453F19F02668}] @="" [HKEY_CLASSES_ROOT\CLSID\{3C1AC895-5441-40B9-A6C5-453F19F02668}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{3C1AC895-5441-40B9-A6C5-453F19F02668}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{3C1AC895-5441-40B9-A6C5-453F19F02668}\InprocServer32] @="C:\\WINDOWS\\system32\\ombccp32.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{5A6618CA-7473-4A66-AF6A-CC69E319909D}] @="" [HKEY_CLASSES_ROOT\CLSID\{5A6618CA-7473-4A66-AF6A-CC69E319909D}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{5A6618CA-7473-4A66-AF6A-CC69E319909D}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{5A6618CA-7473-4A66-AF6A-CC69E319909D}\InprocServer32] @="C:\\WINDOWS\\system32\\guard.tmp" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{FB2F1CE3-89CB-420F-AF3F-03F401A54DCE}] @="" [HKEY_CLASSES_ROOT\CLSID\{FB2F1CE3-89CB-420F-AF3F-03F401A54DCE}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{FB2F1CE3-89CB-420F-AF3F-03F401A54DCE}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{FB2F1CE3-89CB-420F-AF3F-03F401A54DCE}\InprocServer32] @="C:\\WINDOWS\\system32\\dydlgs.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{97895937-98E4-47F9-A451-E68B5D7C1009}] @="" [HKEY_CLASSES_ROOT\CLSID\{97895937-98E4-47F9-A451-E68B5D7C1009}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{97895937-98E4-47F9-A451-E68B5D7C1009}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{97895937-98E4-47F9-A451-E68B5D7C1009}\InprocServer32] @="C:\\WINDOWS\\system32\\ctfview.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{E87DBFEA-C2E8-404A-8400-B6B293A1922C}] @="" [HKEY_CLASSES_ROOT\CLSID\{E87DBFEA-C2E8-404A-8400-B6B293A1922C}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{E87DBFEA-C2E8-404A-8400-B6B293A1922C}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{E87DBFEA-C2E8-404A-8400-B6B293A1922C}\InprocServer32] @="C:\\WINDOWS\\system32\\rUsdlg.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{CBAEB75B-A528-4281-A210-ECBFC22B72E8}] @="" [HKEY_CLASSES_ROOT\CLSID\{CBAEB75B-A528-4281-A210-ECBFC22B72E8}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{CBAEB75B-A528-4281-A210-ECBFC22B72E8}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{CBAEB75B-A528-4281-A210-ECBFC22B72E8}\InprocServer32] @="C:\\WINDOWS\\system32\\guard.tmp" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{38B0A28D-847B-454C-B3A9-B3DFEC263E69}] @="" [HKEY_CLASSES_ROOT\CLSID\{38B0A28D-847B-454C-B3A9-B3DFEC263E69}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{38B0A28D-847B-454C-B3A9-B3DFEC263E69}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{38B0A28D-847B-454C-B3A9-B3DFEC263E69}\InprocServer32] @="C:\\WINDOWS\\system32\\guard.tmp" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{EA111BA7-F9D9-4D3B-BF24-3511BBFD123E}] @="" [HKEY_CLASSES_ROOT\CLSID\{EA111BA7-F9D9-4D3B-BF24-3511BBFD123E}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{EA111BA7-F9D9-4D3B-BF24-3511BBFD123E}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{EA111BA7-F9D9-4D3B-BF24-3511BBFD123E}\InprocServer32] @="C:\\WINDOWS\\system32\\kgdblr.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{6E9D2F59-874C-4282-AAC0-12D75276B2FD}] @="" [HKEY_CLASSES_ROOT\CLSID\{6E9D2F59-874C-4282-AAC0-12D75276B2FD}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{6E9D2F59-874C-4282-AAC0-12D75276B2FD}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{6E9D2F59-874C-4282-AAC0-12D75276B2FD}\InprocServer32] @="C:\\WINDOWS\\system32\\nsprovau.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{7C0F8B3E-A07B-4563-BA98-C6B532870610}] @="" [HKEY_CLASSES_ROOT\CLSID\{7C0F8B3E-A07B-4563-BA98-C6B532870610}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{7C0F8B3E-A07B-4563-BA98-C6B532870610}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{7C0F8B3E-A07B-4563-BA98-C6B532870610}\InprocServer32] @="C:\\WINDOWS\\system32\\ktdmac.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{F3D74DF9-8D4F-475D-B7F2-B1ECB289531D}] @="" [HKEY_CLASSES_ROOT\CLSID\{F3D74DF9-8D4F-475D-B7F2-B1ECB289531D}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{F3D74DF9-8D4F-475D-B7F2-B1ECB289531D}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{F3D74DF9-8D4F-475D-B7F2-B1ECB289531D}\InprocServer32] @="C:\\WINDOWS\\system32\\ozbccp32.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{F3E1A9DF-3E5A-4688-AD86-B05245CDC957}] @="" [HKEY_CLASSES_ROOT\CLSID\{F3E1A9DF-3E5A-4688-AD86-B05245CDC957}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{F3E1A9DF-3E5A-4688-AD86-B05245CDC957}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{F3E1A9DF-3E5A-4688-AD86-B05245CDC957}\InprocServer32] @="C:\\WINDOWS\\system32\\deprop.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{21D6E596-B767-462F-824A-7DF4FC58170A}] @="" [HKEY_CLASSES_ROOT\CLSID\{21D6E596-B767-462F-824A-7DF4FC58170A}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{21D6E596-B767-462F-824A-7DF4FC58170A}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{21D6E596-B767-462F-824A-7DF4FC58170A}\InprocServer32] @="C:\\WINDOWS\\system32\\oxecli.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{D0D28F1A-9D94-46DA-AA6B-DE0532BD892B}] @="" [HKEY_CLASSES_ROOT\CLSID\{D0D28F1A-9D94-46DA-AA6B-DE0532BD892B}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{D0D28F1A-9D94-46DA-AA6B-DE0532BD892B}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{D0D28F1A-9D94-46DA-AA6B-DE0532BD892B}\InprocServer32] @="C:\\WINDOWS\\system32\\mxcsubs.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{81623594-87F9-413F-8098-8A818AEF346C}] @="" [HKEY_CLASSES_ROOT\CLSID\{81623594-87F9-413F-8098-8A818AEF346C}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{81623594-87F9-413F-8098-8A818AEF346C}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{81623594-87F9-413F-8098-8A818AEF346C}\InprocServer32] @="C:\\WINDOWS\\system32\\wbpns.dll" "ThreadingModel"="Apartment" ********************************************************************************** Files Found are not all bad files: C:\WINDOWS\SYSTEM32\ snvsvc.dll Wed 2005-11-02 18:46:44 ..S.R 233 815 228,33 K nfrsel.dll Fri 2005-11-25 19:49:32 ..S.R 234 442 228,95 K fbe.dll Thu 2005-11-10 22:30:48 ..S.R 235 091 229,58 K nwrstr.dll Fri 2005-11-11 17:15:38 ..S.R 235 091 229,58 K ncrspt.dll Sun 2005-11-06 5:17:28 ..S.R 235 188 229,68 K irl0l5~1.dll Sat 2005-11-05 14:17:48 ..S.R 236 178 230,64 K dydlgs.dll Fri 2005-11-18 21:07:58 ..S.R 235 747 230,22 K qrsname.dll Tue 2005-11-08 19:10:42 ..S.R 235 091 229,58 K gdi32.dll Thu 2005-10-06 4:18:44 A.... 280 064 273,50 K nuwrscs.dll Sat 2005-11-12 11:48:34 ..S.R 236 001 230,47 K dvcpcsvc.dll Sat 2005-11-12 15:04:26 ..S.R 235 919 230,39 K extmgr.dll Sat 2005-09-03 1:54:58 A.... 55 808 54,50 K rggwizc.dll Sun 2005-11-13 10:43:48 ..S.R 235 048 229,54 K mogsvc.dll Sat 2005-11-12 21:04:04 ..S.R 234 158 228,67 K ctfview.dll Sat 2005-11-19 12:16:54 ..S.R 235 854 230,32 K ombccp32.dll Sun 2005-11-13 19:23:50 ..S.R 235 048 229,54 K browseui.dll Sat 2005-09-03 1:54:56 A.... 1 020 416 996,50 K cdfview.dll Sat 2005-09-03 1:54:56 A.... 151 552 148,00 K danim.dll Sat 2005-09-03 1:54:58 A.... 1 055 232 1,00 M dxtrans.dll Sat 2005-09-03 1:54:58 A.... 205 312 200,50 K iepeers.dll Sat 2005-09-03 1:54:58 A.... 251 392 245,50 K mshtml.dll Tue 2005-10-04 17:27:36 A.... 3 013 120 2,87 M mshtmled.dll Sat 2005-09-03 1:55:02 A.... 448 512 438,00 K msrating.dll Sat 2005-09-03 1:55:02 A.... 146 432 143,00 K kgdblr.dll Sun 2005-11-20 16:57:14 ..S.R 234 053 228,57 K wininet.dll Sat 2005-09-03 1:55:08 A.... 660 992 645,50 K mstime.dll Sat 2005-09-03 1:55:04 A.... 530 432 518,00 K cdosys.dll Sat 2005-09-10 3:55:34 A.... 2 067 968 1,97 M winsrv.dll Thu 2005-09-01 4:28:38 A.... 292 352 285,50 K nsprovau.dll Sun 2005-11-20 17:48:08 ..S.R 234 053 228,57 K nv4_disp.dll Fri 2005-11-04 18:03:00 A.... 3 924 096 3,74 M nvhwvid.dll Fri 2005-11-04 18:03:00 A.... 573 440 560,00 K nvapi.dll Fri 2005-11-04 18:03:00 A.... 86 016 84,00 K wbpns.dll Fri 2005-11-25 20:09:08 ..S.R 234 442 228,95 K rugsvc.dll Mon 2005-10-31 18:37:50 ..S.R 236 266 230,73 K nvoglnt.dll Fri 2005-11-04 18:03:00 A.... 5 394 432 5,14 M ozbccp32.dll Fri 2005-11-25 12:17:00 ..S.R 234 442 228,95 K ndrshe.dll Mon 2005-10-31 10:19:54 ..S.R 235 571 230,05 K irpeers.dll Tue 2005-11-01 17:22:48 ..S.R 236 338 230,80 K nehwvid.dll Tue 2005-11-01 10:21:20 ..S.R 235 740 230,21 K obbcconf.dll Tue 2005-11-01 17:56:32 ..S.R 236 178 230,64 K bytsprx2.dll Tue 2005-11-01 20:58:10 ..S.R 236 588 231,04 K mvports.dll Wed 2005-11-02 10:36:54 ..S.R 236 178 230,64 K nvcpl.dll Fri 2005-11-04 18:03:00 A.... 7 307 264 6,97 M ktdmac.dll Tue 2005-11-22 18:17:28 ..S.R 234 053 228,57 K nvmctray.dll Fri 2005-11-04 18:03:00 A.... 86 016 84,00 K nvwddi.dll Fri 2005-11-04 18:03:00 A.... 81 920 80,00 K nvnt4cpl.dll Fri 2005-11-04 18:03:00 A.... 286 720 280,00 K quartz.dll Tue 2005-08-30 5:56:14 A.... 1 290 752 1,23 M nvmccs.dll Fri 2005-11-04 18:03:00 A.... 229 376 224,00 K nvcod.dll Fri 2005-11-04 18:03:00 A.... 35 328 34,50 K nview.dll Fri 2005-11-04 18:03:00 A.... 1 466 368 1,40 M nvshell.dll Fri 2005-11-04 18:03:00 A.... 466 944 456,00 K nvwdmcpl.dll Fri 2005-11-04 18:03:00 A.... 1 662 976 1,59 M nvwimg.dll Fri 2005-11-04 18:03:00 A.... 1 019 904 996,00 K nvmccsrs.dll Fri 2005-11-04 18:03:00 A.... 45 056 44,00 K nvrsar.dll Fri 2005-11-04 18:03:00 A.... 319 488 312,00 K nvwrsar.dll Fri 2005-11-04 18:03:00 A.... 282 624 276,00 K nvrscs.dll Fri 2005-11-04 18:03:00 A.... 241 664 236,00 K nvwrscs.dll Fri 2005-11-04 18:03:00 A.... 286 720 280,00 K nvrsda.dll Fri 2005-11-04 18:03:00 A.... 245 760 240,00 K nvwrsda.dll Fri 2005-11-04 18:03:00 A.... 294 912 288,00 K nvrsde.dll Fri 2005-11-04 18:03:00 A.... 270 336 264,00 K nvwrsde.dll Fri 2005-11-04 18:03:00 A.... 311 296 304,00 K nvrsel.dll Fri 2005-11-04 18:03:00 A.... 274 432 268,00 K nvwrsel.dll Fri 2005-11-04 18:03:00 A.... 335 872 328,00 K nvrseng.dll Fri 2005-11-04 18:03:00 A.... 241 664 236,00 K nvwrseng.dll Fri 2005-11-04 18:03:00 A.... 286 720 280,00 K nvrses.dll Fri 2005-11-04 18:03:00 A.... 274 432 268,00 K nvwrses.dll Fri 2005-11-04 18:03:00 A.... 335 872 328,00 K nvrsesm.dll Fri 2005-11-04 18:03:00 A.... 266 240 260,00 K nvwrsesm.dll Fri 2005-11-04 18:03:00 A.... 327 680 320,00 K nvrsfi.dll Fri 2005-11-04 18:03:00 A.... 241 664 236,00 K nvwrsfi.dll Fri 2005-11-04 18:03:00 A.... 303 104 296,00 K nvrsfr.dll Fri 2005-11-04 18:03:00 A.... 278 528 272,00 K nvwrsfr.dll Fri 2005-11-04 18:03:00 A.... 327 680 320,00 K nvrshe.dll Fri 2005-11-04 18:03:00 A.... 319 488 312,00 K nvwrshe.dll Fri 2005-11-04 18:03:00 A.... 278 528 272,00 K nvrshu.dll Fri 2005-11-04 18:03:00 A.... 253 952 248,00 K nvwrshu.dll Fri 2005-11-04 18:03:00 A.... 315 392 308,00 K nvrsit.dll Fri 2005-11-04 18:03:00 A.... 274 432 268,00 K nvwrsit.dll Fri 2005-11-04 18:03:00 A.... 323 584 316,00 K nvrsja.dll Fri 2005-11-04 18:03:00 A.... 258 048 252,00 K nvwrsja.dll Fri 2005-11-04 18:03:00 A.... 212 992 208,00 K nvrsko.dll Fri 2005-11-04 18:03:00 A.... 253 952 248,00 K nvwrsko.dll Fri 2005-11-04 18:03:00 A.... 196 608 192,00 K nvrsnl.dll Fri 2005-11-04 18:03:00 A.... 266 240 260,00 K nvwrsnl.dll Fri 2005-11-04 18:03:00 A.... 319 488 312,00 K nvrsno.dll Fri 2005-11-04 18:03:00 A.... 249 856 244,00 K nvwrsno.dll Fri 2005-11-04 18:03:00 A.... 299 008 292,00 K nvrspl.dll Fri 2005-11-04 18:03:00 A.... 249 856 244,00 K nvwrspl.dll Fri 2005-11-04 18:03:00 A.... 294 912 288,00 K nvrspt.dll Fri 2005-11-04 18:03:00 A.... 266 240 260,00 K nvwrspt.dll Fri 2005-11-04 18:03:00 A.... 323 584 316,00 K nvrsptb.dll Fri 2005-11-04 18:03:00 A.... 262 144 256,00 K nvwrsptb.dll Fri 2005-11-04 18:03:00 A.... 319 488 312,00 K nvrsru.dll Fri 2005-11-04 18:03:00 A.... 262 144 256,00 K nvwrsru.dll Fri 2005-11-04 18:03:00 A.... 315 392 308,00 K nvrssk.dll Fri 2005-11-04 18:03:00 A.... 249 856 244,00 K nvwrssk.dll Fri 2005-11-04 18:03:00 A.... 299 008 292,00 K nvrssl.dll Fri 2005-11-04 18:03:00 A.... 249 856 244,00 K nvwrssl.dll Fri 2005-11-04 18:03:00 A.... 303 104 296,00 K nvrssv.dll Fri 2005-11-04 18:03:00 A.... 245 760 240,00 K nvwrssv.dll Fri 2005-11-04 18:03:00 A.... 294 912 288,00 K nvrstr.dll Fri 2005-11-04 18:03:00 A.... 249 856 244,00 K nvwrstr.dll Fri 2005-11-04 18:03:00 A.... 303 104 296,00 K nvrszhc.dll Fri 2005-11-04 18:03:00 A.... 217 088 212,00 K nvwrszhc.dll Fri 2005-11-04 18:03:00 A.... 163 840 160,00 K nvrszht.dll Fri 2005-11-04 18:03:00 A.... 118 784 116,00 K nvwrszht.dll Fri 2005-11-04 18:03:00 A.... 167 936 164,00 K ir80l5~1.dll Tue 2005-11-22 18:17:38 ..S.R 234 187 228,70 K deprop.dll Fri 2005-11-25 13:59:24 ..S.R 234 442 228,95 K shell32.dll Fri 2005-09-23 5:07:40 A.... 8 479 232 8,09 M linkinfo.dll Thu 2005-09-01 4:28:38 A.... 19 968 19,50 K urlmon.dll Sat 2005-09-03 1:55:08 A.... 604 672 590,50 K rusdlg.dll Sat 2005-11-19 15:31:24 ..S.R 235 854 230,32 K k4pm0e~1.dll Sun 2005-11-20 3:52:42 ..S.R 235 747 230,22 K nvcodins.dll Fri 2005-11-04 18:03:00 A.... 35 328 34,50 K shlwapi.dll Sat 2005-09-03 1:55:06 A.... 473 600 462,50 K lv2209~1.dll Mon 2005-10-31 18:38:00 ..S.R 236 329 230,79 K shdocvw.dll Sat 2005-09-03 1:55:06 A.... 1 483 776 1,41 M ir0ml5~1.dll Fri 2005-11-25 17:02:04 ..S.R 234 442 228,95 K oxecli.dll Fri 2005-11-25 15:09:16 ..S.R 234 442 228,95 K pngfilt.dll Sat 2005-09-03 1:55:04 A.... 39 424 38,50 K hrju05~1.dll Sat 2005-11-12 15:08:26 ..S.R 235 919 230,39 K mxcsubs.dll Fri 2005-11-25 17:39:30 ..S.R 235 046 229,54 K inseng.dll Sat 2005-09-03 1:54:58 A.... 96 768 94,50 K ssmsrv.dll Sun 2005-11-06 15:11:34 ..S.R 233 913 228,43 K c6002g~1.dll Fri 2005-11-25 17:39:34 ..S.R 235 320 229,80 K p24ulc~1.dll Fri 2005-11-25 20:03:32 ..S.R 236 384 230,84 K en84l1~1.dll Fri 2005-11-25 20:09:08 ..S.R 235 923 230,39 K 131 items found: 131 files (39 H/S), 0 directories. Total of file sizes: 69 268 601 bytes 66,06 M Locate .tmp files: No matches found. ********************************************************************************** Directory Listing of system files: Wolumin w stacji C nie ma etykiety. Numer seryjny woluminu: 34F7-8A96 Katalog: C:\WINDOWS\System32 2005-11-25 20:09 234˙442 wbpns.dll 2005-11-25 20:09 235˙923 en84l1lq1.dll 2005-11-25 20:03 236˙384 p24ulch91f4.dll 2005-11-25 19:49 234˙442 nfrsel.dll 2005-11-25 17:39 235˙320 c6002gdmg60a2.dll 2005-11-25 17:39 235˙046 mxcsubs.dll 2005-11-25 17:02 234˙442 ir0ml5d11.dll 2005-11-25 15:09 234˙442 oxecli.dll 2005-11-25 13:59 234˙442 deprop.dll 2005-11-25 12:17 234˙442 ozbccp32.dll 2005-11-22 18:17 234˙187 ir80l5lm1.dll 2005-11-22 18:17 234˙053 ktdmac.dll 2005-11-20 17:48 234˙053 nsprovau.dll 2005-11-20 16:57 234˙053 kgdblr.dll 2005-11-20 03:52 235˙747 k4pm0e71eh.dll 2005-11-19 15:31 235˙854 rUsdlg.dll 2005-11-19 12:16 235˙854 ctfview.dll 2005-11-18 21:07 235˙747 dydlgs.dll 2005-11-13 19:23 235˙048 ombccp32.dll 2005-11-13 10:43 235˙048 rggwizc.dll 2005-11-12 21:04 234˙158 mogsvc.dll 2005-11-12 15:08 235˙919 hrju0519e.dll 2005-11-12 15:04 235˙919 dvcpcsvc.dll 2005-11-12 11:48 236˙001 nuwrscs.dll 2005-11-11 17:15 235˙091 nwrstr.dll 2005-11-10 22:30 235˙091 fbe.dll 2005-11-08 19:10 235˙091 qrsname.dll 2005-11-06 15:11 233˙913 sSmsrv.dll 2005-11-06 05:17 235˙188 ncrspt.dll 2005-11-05 14:17 236˙178 irl0l53m1.dll 2005-11-02 18:46 233˙815 snvsvc.dll 2005-11-02 10:36 236˙178 mvports.dll 2005-11-01 20:58 236˙588 bytsprx2.dll 2005-11-01 17:56 236˙178 obbcconf.dll 2005-11-01 17:22 236˙338 irpeers.dll 2005-11-01 10:21 235˙740 nehwvid.dll 2005-10-31 18:38 236˙329 lv2209foe.dll 2005-10-31 18:37 236˙266 rugsvc.dll 2005-10-31 10:19 235˙571 ndrshe.dll 2005-08-10 14:20 <DIR> Microsoft 2005-08-10 13:52 <DIR> dllcache 39 plik(˘w) 9˙174˙521 bajt˘w 2 katalog(˘w) 520˙454˙144 bajt˘w wolnych

[ Dodano: Dzisiaj o 20:36 ]
HJ :

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 20:22:29, on 2005-11-25 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe E:\AVPERSONAL\AVGUARD.EXE C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe e:\AVPersonal\AVWUPSRV.EXE C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\Explorer.EXE E:\AVPersonal\AVGNT.EXE D:\powerstrip\pstrip.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe D:\steam\steam.exe C:\Program Files\Ad-Aware SE Professional\Ad-Watch.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe C:\Program Files\Alwil Software\Avast4\setup\avast.setup C:\WINDOWS\system32\wuauclt.exe E:\Downloads\hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.findthewebsiteyouneed.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.findthewebsiteyouneed.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbar.findthewebsiteyouneed.com R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O4 - HKLM\..\Run: [AVGCtrl] E:\AVPersonal\AVGNT.EXE /min O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [PowerStrip] d:\powerstrip\pstrip.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM O4 - HKLM\..\Run: [sp2update] C:\windows\sp2update00.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Konnekt] "C:\Program Files\Konnekt\konnekt.exe" /autostart O4 - HKCU\..\Run: [Steam] "d:\steam\steam.exe" -silent O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1 O4 - HKCU\..\Run: [AWMON] "C:\Program Files\Ad-Aware SE Professional\Ad-Watch.exe" O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Ściągnij przy pomocy FlashGet'a - E:\FlashGet\jc_link.htm O8 - Extra context menu item: Ściągnij wszystko przy pomocy FlashGet'a - E:\FlashGet\jc_all.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - e:\ICQLite\ICQLite.exe (file missing) O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - e:\ICQLite\ICQLite.exe (file missing) O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\FLASHGET\flashget.exe O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\FLASHGET\flashget.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O20 - Winlogon Notify: Applets - C:\WINDOWS\system32\ir0ml5d11.dll O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - E:\AVPERSONAL\AVGUARD.EXE O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - e:\AVPersonal\AVWUPSRV.EXE O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\TWF0aQAA\command.exe (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

[ Dodano: Dzisiaj o 20:37 ]
Tak to się prezentuje.

**Posty:** 8694 · przez **Red** 25 Lis 2005, 21:59

ManiPt napisał(a):Tak to się prezentuje.

>>masakra wstepnie

przeskanuj kompa:
http://www.ewido.net/en/download/
http://www.pobieralnia.pl/index.php/item-show/39f/

nastepnie odpal l2mfix.bat,ale z opcji 2 ,ty dales z opcji 1

**Posty:** 6 · przez **ManiPt** 25 Lis 2005, 22:07

Dałem na początku z opcji 2 ale wtedy nie stworzył się raport ;] Pozniej zrobiłem najpierw 1, później 2., res i napisałem posta ;]. Ogólnie to bedzie zył czy format będzie jednak konieczny ??

**Posty:** 8694 · przez **Red** 25 Lis 2005, 22:12

ManiPt napisał(a):Ogólnie to bedzie zył czy format będzie jednak konieczny ??

>>bedzie zył bez formatu ,ale jesli jeszcze cos cie atakuje to walczymy do samego konca......

Autor postu otrzymał pochwałę

**Posty:** 6 · przez **ManiPt** 26 Lis 2005, 13:38

Dobra wygląda na to że wszsytko gra;] Spy Sweeper blokuje te okienka więc jest dobrze. MAm tylko problem, bo nie mogę zupdejtować Definicji....

Kod: Zaznacz wszystko: Definitions can not be updated because subscription has expired.

A niby wszystko zrobiłem jak należy..

Jakieś sugestie ;> ??

**Posty:** 8694 · przez **Red** 26 Lis 2005, 13:42

ManiPt napisał(a):Definitions can not be updated because subscription has expired.

>>to jest trial ,wiec moze jest tak ze masz juz pewną baze i wiecej nie pobierzesz

mozesz jeszcze sciagnac ta wersje:
http://www.dagma.pl/new/download/webroot/spysweeper_trial_he.exe
i sprawdz czy zaktualizuje sie ,ale pamietaj ze to trial i po pewnym czasie stracisz mozliwosc aktualizacji ,natomiast sam program bedzie działał i mozesz dalej go uzywac

mój log z prośbą o pomoc..

mój log z prośbą o pomoc..

Kto jest na forum