Masakrycznie dlugie wlaczanie laptopa

**Posty:** 5 · przez **Wyjec** 12 Wrz 2009, 23:14

Witam,
od jakiegos czasu laptop mojej dziewczyny strasznie dlugo sie wlacza... sprawdzalem w msconfigu czy ma sporo rzeczy niepotrzebnych ale wszystko co bylo to juz skasowalem ale nie pomoglo:( jesli mozecie to rzuccie okiem na loga z hijacka:

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:07:16, on 2009-09-12 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe D:\Programiki\Avast\aswUpdSv.exe D:\Programiki\Avast\ashServ.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Synaptics\SynTP\SynTPEnh.exe D:\PROGRA~1\Avast\ashDisp.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\WINDOWS\PixArt\PAC207\Monitor.exe C:\WINDOWS\system32\ctfmon.exe D:\Programiki\gadu\Gadu-Gadu\gg.exe C:\Program Files\DNA\btdna.exe D:\Programiki\BitTorrent\BitTorrent.exe C:\WINDOWS\system32\spoolsv.exe C:\DOCUME~1\Dominika\USTAWI~1\Temp\RtkBtMnt.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\wuauclt.exe D:\Programiki\Avast\ashMaiSv.exe D:\Programiki\Avast\ashWebSv.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\System32\svchost.exe D:\Programiki\Mozilla\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.defaulthomepage.info R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.defaulthomepage.info R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\Avast\ashDisp.exe O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "D:\Programiki\gadu\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe" O4 - HKCU\..\Run: [BitTorrent] "D:\Programiki\BitTorrent\BitTorrent.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: Kolekcja wycinków HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Zaznaczanie HP Smart - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Programiki\Avast\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - D:\Programiki\Avast\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Programiki\Avast\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - D:\Programiki\Avast\ashWebSv.exe O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing) -- End of file - 5777 bytes

jeszcze jedna sprawa... jesli chodzi o www to tez muli bardziej niz powinien. Przynioslem swojego lapka do niej, podlaczylem sie pod jej routera i w tym samym czasie u mnie smiga a u niej sie czolga i wyje z rozpaczy

**Posty:** 597 · przez **Spawacz** 12 Wrz 2009, 23:19

optymalizacja-windowsa-xp-vt89133.html

Spójrz na ten temat i możesz przeskanowac antywirem. Może to coś pomoże

**Posty:** 584 · przez **Andziorka** 12 Wrz 2009, 23:39

Zaznacz w HijackThis i Fix:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.defaulthomepage.info
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.defaulthomepage.info
O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

Daj loga z OTL: jak-generujemy-loga-z-rsita-i-otl-vt95026.html

**Posty:** 5637 · przez **kahoona** 12 Wrz 2009, 23:51

Wyłącz z autostartu (lub w opcjach programu):

Kod: Zaznacz wszystko: C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe

- zwłaszcza dotyczy to NERO, które robi sobie backup danych.

Także opcje związanych z oprogramowaniem HP, Javy oraz usługi

Kod: Zaznacz wszystko: O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

- zbędnej.

Nie byłoby głupie również ustawić właściwą stronę startową - zamiast

Kod: Zaznacz wszystko: R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.defaulthomepage.info R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.defaulthomepage.info

**Posty:** 5 · przez **Wyjec** 13 Wrz 2009, 10:34

Kod: Zaznacz wszystko: OTL logfile created on: 2009-09-13 10:32:39 - Run 1 OTL by OldTimer - Version 3.0.11.0 Folder = C:\Documents and Settings\Dominika\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,99 Gb Total Physical Memory | 1,41 Gb Available Physical Memory | 70,59% Memory free 3,33 Gb Paging File | 2,83 Gb Available in Paging File | 85,03% Paging File free Paging file location(s): C:\pagefile.sys 1524 3048 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 39,06 Gb Total Space | 30,99 Gb Free Space | 79,34% Space Free | Partition Type: NTFS Drive D: | 72,72 Gb Total Space | 54,80 Gb Free Space | 75,36% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: DOMINIKA-AB01C7 Current User Name: Dominika Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: On Skip Microsoft Files: On File Age = 14 Days Output = Standard Quick Scan [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2009-08-17 17:58:55 | 00,018,752 | ---- | M] (ALWIL Software) -- D:\Programiki\Avast\aswUpdSv.exe PRC - [2009-08-17 18:07:17 | 00,138,680 | ---- | M] (ALWIL Software) -- D:\Programiki\Avast\ashServ.exe PRC - [2008-04-14 19:21:16 | 01,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2007-06-13 06:55:46 | 00,162,584 | R--- | M] (Intel Corporation) -- C:\WINDOWS\System32\hkcmd.exe PRC - [2007-05-28 10:32:36 | 16,132,608 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTHDCPL.EXE PRC - [2005-12-16 10:32:58 | 00,761,945 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe PRC - [2009-08-17 18:07:23 | 00,081,000 | ---- | M] (ALWIL Software) -- D:\Programiki\Avast\ashDisp.exe PRC - [2006-11-03 11:01:16 | 00,319,488 | ---- | M] (PixArt Imaging Incorporation) -- C:\WINDOWS\PixArt\PAC207\Monitor.exe PRC - [2008-03-20 12:04:46 | 02,127,296 | ---- | M] (Gadu-Gadu S.A.) -- D:\Programiki\gadu\Gadu-Gadu\gg.exe PRC - [2008-12-16 07:01:58 | 00,342,848 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\DNA\btdna.exe PRC - [2008-09-04 17:51:44 | 00,208,896 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Documents and Settings\Dominika\Ustawienia lokalne\Temp\RtkBtMnt.exe PRC - [2008-08-14 19:50:04 | 00,587,568 | ---- | M] () -- D:\Programiki\BitTorrent\BitTorrent.exe PRC - [2006-02-28 12:42:38 | 00,229,376 | ---- | M] (Apple Computer, Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe PRC - [2009-07-25 05:23:10 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe PRC - [2008-09-29 05:09:20 | 00,935,208 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe PRC - [2005-01-28 14:44:28 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfmgr.exe PRC - [2009-08-17 18:07:01 | 00,254,040 | ---- | M] (ALWIL Software) -- D:\Programiki\Avast\ashMaiSv.exe PRC - [2009-08-17 18:04:21 | 00,352,920 | ---- | M] (ALWIL Software) -- D:\Programiki\Avast\ashWebSv.exe PRC - [2009-09-11 17:42:47 | 00,307,704 | ---- | M] (Mozilla Corporation) -- D:\Programiki\Mozilla\firefox.exe PRC - [2008-04-14 19:21:30 | 01,695,232 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe PRC - [2008-04-14 19:21:49 | 00,196,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\WBEM\WMIADAP.EXE PRC - [2009-09-13 10:31:57 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Dominika\Pulpit\OTL.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2008-07-25 11:16:40 | 00,034,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped]) SRV - [2009-08-17 17:58:55 | 00,018,752 | ---- | M] (ALWIL Software) -- D:\Programiki\Avast\aswUpdSv.exe -- (aswUpdSv [Auto | Running]) SRV - [2009-08-17 18:07:17 | 00,138,680 | ---- | M] (ALWIL Software) -- D:\Programiki\Avast\ashServ.exe -- (avast! Antivirus [Auto | Running]) SRV - [2009-08-17 18:07:01 | 00,254,040 | ---- | M] (ALWIL Software) -- D:\Programiki\Avast\ashMaiSv.exe -- (avast! Mail Scanner [On_Demand | Running]) SRV - [2009-08-17 18:04:21 | 00,352,920 | ---- | M] (ALWIL Software) -- D:\Programiki\Avast\ashWebSv.exe -- (avast! Web Scanner [On_Demand | Running]) SRV - [2006-02-28 12:42:38 | 00,229,376 | ---- | M] (Apple Computer, Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service [Auto | Running]) SRV - [2008-07-25 11:17:02 | 00,069,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) SRV - [2009-08-21 22:07:19 | 00,654,848 | ---- | M] (Macrovision Europe Ltd.) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service [On_Demand | Stopped]) SRV - [2008-07-29 21:10:04 | 00,046,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped]) SRV - [2008-04-14 19:20:44 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running]) SRV - [2008-03-25 20:38:24 | 00,217,088 | ---- | M] (Hewlett-Packard Co.) -- C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll -- (hpqcxs08 [On_Demand | Running]) SRV - [2008-03-25 21:27:36 | 00,135,168 | ---- | M] (Hewlett-Packard Co.) -- C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll -- (hpqddsvc [Auto | Running]) SRV - [2008-07-29 19:24:50 | 00,881,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [Unknown | Stopped]) SRV - [2008-04-14 19:20:33 | 00,028,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\irmon.dll -- (Irmon [Auto | Running]) SRV - [2009-07-25 05:23:10 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running]) SRV - [2008-09-29 05:09:20 | 00,935,208 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0 [Auto | Running]) SRV - [2008-07-18 13:13:20 | 00,044,032 | ---- | M] (Hewlett-Packard) -- C:\WINDOWS\System32\HPZinw12.dll -- (Net Driver HPZ12 [Auto | Running]) SRV - [2008-07-29 19:16:38 | 00,132,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped]) SRV - [2009-07-22 01:49:00 | 03,240,876 | ---- | M] (INCA Internet Co., Ltd.) -- C:\WINDOWS\System32\GameMon.des -- (npggsvc [On_Demand | Stopped]) SRV - [2008-07-18 13:13:20 | 00,053,760 | ---- | M] (Hewlett-Packard) -- C:\WINDOWS\System32\HPZipm12.dll -- (Pml Driver HPZ12 [Auto | Running]) SRV - [2005-01-28 14:44:28 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfmgr.exe -- (UMWdf [Auto | Running]) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1645522239-1532298954-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKU\S-1-5-21-1645522239-1532298954-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKU\S-1-5-21-1645522239-1532298954-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-1645522239-1532298954-839522115-1003\S-1-5-21-1645522239-1532298954-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1645522239-1532298954-839522115-1003\S-1-5-21-1645522239-1532298954-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Fast Browser Search" FF - prefs.js..browser.search.defaultthis.engineName: "free-downloads.net Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=18&q=" FF - prefs.js..browser.search.order.1: "Fast Browser Search" FF - prefs.js..browser.search.selectedEngine: "Fast Browser Search" FF - prefs.js..browser.search.suggest.enabled: false FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.pl/ig?hl=pl&source=iglk" FF - prefs.js..extensions.enabledItems: {582195F5-92E7-40a0-A127-DB71295901D7}:0.5.7.3 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}:6.0.10 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:0.0.0 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.14 FF - prefs.js..keyword.URL: "http://www.fastbrowsersearch.com/results/results.aspx?s=NAUS&v=18&tid={C7796763-1552-155F-424E-98228ACB3746}&q=" FF - HKLM\software\mozilla\Firefox\extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009-08-10 19:03:02 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2008-10-23 23:27:11 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.14\extensions\\Components: D:\Programiki\Mozilla\components [2009-09-11 17:42:57 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.14\extensions\\Plugins: D:\Programiki\Mozilla\plugins [2009-09-11 17:42:57 | 00,000,000 | ---D | M] [2008-09-04 20:15:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\mozilla\Extensions [2008-09-04 20:15:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2009-09-12 23:15:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\mozilla\Firefox\Profiles\amtrfj5r.default\extensions [2009-08-21 08:23:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\mozilla\Firefox\Profiles\amtrfj5r.default\extensions\{582195F5-92E7-40a0-A127-DB71295901D7} [2009-08-31 16:54:01 | 00,001,927 | ---- | M] () -- C:\Documents and Settings\Dominika\Dane aplikacji\Mozilla\FireFox\Profiles\amtrfj5r.default\searchplugins\ask.xml [2008-10-28 14:24:00 | 00,000,898 | ---- | M] () -- C:\Documents and Settings\Dominika\Dane aplikacji\Mozilla\FireFox\Profiles\amtrfj5r.default\searchplugins\conduit.xml [2008-12-22 20:09:17 | 00,000,523 | ---- | M] () -- C:\Documents and Settings\Dominika\Dane aplikacji\Mozilla\FireFox\Profiles\amtrfj5r.default\searchplugins\daemon-search.xml [2008-11-23 13:13:00 | 00,001,196 | ---- | M] () -- C:\Documents and Settings\Dominika\Dane aplikacji\Mozilla\FireFox\Profiles\amtrfj5r.default\searchplugins\winamp-search.xml O1 HOSTS File: (742 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) O2 - BHO: (HP Print Clips) - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll (Hewlett-Packard Co.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O3 - HKU\S-1-5-21-1645522239-1532298954-839522115-1003\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [avast!] D:\Programiki\Avast\ashDisp.exe (ALWIL Software) O4 - HKLM..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe (Intel Corporation) O4 - HKLM..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe (PixArt Imaging Incorporation) O4 - HKLM..\Run: [RTHDCPL] C:\WINDOWS\RTHDCPL.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.) O4 - HKU\S-1-5-21-1645522239-1532298954-839522115-1003..\Run: [BitTorrent] D:\Programiki\BitTorrent\BitTorrent.exe () O4 - HKU\S-1-5-21-1645522239-1532298954-839522115-1003..\Run: [BitTorrent DNA] C:\Program Files\DNA\btdna.exe (BitTorrent, Inc.) O4 - HKU\S-1-5-21-1645522239-1532298954-839522115-1003..\Run: [Gadu-Gadu] D:\Programiki\gadu\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) O4 - HKLM..\RunOnce: [CleanSetup] File not found O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1645522239-1532298954-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: E&ksport do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office10\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Kolekcja wycinków HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.) O9 - Extra Button: Zaznaczanie HP Smart - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.) O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.63 192.168.0.1 O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008-09-04 17:36:55 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{2ee7ebae-b290-11dd-8c7a-002269069682}\Shell - "" = AutoRun O33 - MountPoints2\{2ee7ebae-b290-11dd-8c7a-002269069682}\Shell\AutoRun\command - "" = H:\DPFMate.exe -- File not found O33 - MountPoints2\{2f6c6fea-ea22-11dd-8d1e-002269069682}\Shell - "" = Autorun O33 - MountPoints2\{2f6c6fea-ea22-11dd-8d1e-002269069682}\Shell\AutoRun\command - "" = H:\setup.exe -- File not found O33 - MountPoints2\{75671c68-43b2-11de-8e1e-002269069682}\Shell\AutoRun\command - "" = H:\icxpa.cmd -- File not found O33 - MountPoints2\{75671c68-43b2-11de-8e1e-002269069682}\Shell\open\Command - "" = H:\icxpa.cmd -- File not found O33 - MountPoints2\H\Shell - "" = AutoRun O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\LaunchU3.exe -- File not found O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - File not found [color=#E56717]========== Files/Folders - Created Within 14 Days ==========[/color] [5 C:\WINDOWS\*.tmp files] [3 C:\Documents and Settings\Dominika\Moje dokumenty\*.tmp files] [2009-09-13 10:30:31 | 00,000,000 | ---D | C] -- C:\_OTL [2009-09-13 10:29:09 | 00,513,536 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Dominika\Pulpit\OTL.exe [2009-09-13 10:26:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\LastGood [2009-09-12 23:07:04 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro [2009-09-12 22:59:44 | 00,000,000 | ---D | C] -- C:\WINDOWS\pss [2009-09-09 21:21:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Dominika\Dane aplikacji\U3 [2009-09-09 18:12:59 | 00,023,552 | ---- | C] () -- C:\Documents and Settings\Dominika\Pulpit\kasa.xls [2009-09-04 01:04:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Dominika\Ustawienia lokalne\Dane aplikacji\Opera [2009-09-04 01:04:40 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Dominika\Dane aplikacji\Opera [2009-09-03 10:28:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Dominika\Moje dokumenty\Dragonica [2009-09-03 09:44:18 | 03,240,876 | ---- | C] (INCA Internet Co., Ltd.) -- C:\WINDOWS\System32\GameMon.des [2009-09-03 09:42:00 | 00,004,682 | ---- | C] (INCA Internet Co., Ltd.) -- C:\WINDOWS\System32\npptNT2.sys [2009-09-03 09:41:59 | 00,005,174 | ---- | C] () -- C:\WINDOWS\System32\nppt9x.vxd [2009-09-03 09:41:58 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\INCA Shared [2009-09-03 09:09:12 | 00,000,000 | ---D | C] -- C:\Program Files\gPotato.eu [color=#E56717]========== Files - Modified Within 14 Days ==========[/color] [1 C:\WINDOWS\System32\*.tmp files] [5 C:\WINDOWS\*.tmp files] [3 C:\Documents and Settings\Dominika\Moje dokumenty\*.tmp files] [2009-09-13 10:31:57 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Dominika\Pulpit\OTL.exe [2009-09-13 10:26:57 | 00,733,048 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2009-09-13 10:26:57 | 00,432,690 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2009-09-13 10:26:57 | 00,138,432 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2009-09-13 10:26:57 | 00,084,078 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2009-09-13 10:26:57 | 00,067,646 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2009-09-13 09:41:20 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-09-13 09:39:39 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-09-13 09:39:33 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-09-12 23:04:52 | 00,000,860 | ---- | M] () -- C:\WINDOWS\win.ini [2009-09-12 23:04:52 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2009-09-12 23:04:52 | 00,000,211 | -HS- | M] () -- C:\boot.ini [2009-09-12 13:15:20 | 00,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2009-09-11 20:22:10 | 00,147,968 | ---- | M] () -- C:\Documents and Settings\Dominika\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-09-10 17:00:53 | 00,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2009-09-09 18:12:59 | 00,023,552 | ---- | M] () -- C:\Documents and Settings\Dominika\Pulpit\kasa.xls [color=#E56717]========== LOP Check ==========[/color] [2009-08-21 22:18:11 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji [2008-09-12 14:59:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ashampoo [2009-07-06 20:12:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Broadcom [2008-12-22 20:09:28 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2008-09-04 19:26:40 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Default User\Dane aplikacji [2009-09-09 21:21:06 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji [2009-01-06 21:15:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\Ashampoo [2008-09-12 15:01:36 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\Ashampoo Photo Commander 5 [2009-01-26 13:09:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\AutoUpdate [2008-10-26 20:50:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\Azureus [2009-08-17 23:17:48 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\BESTplayer [2009-09-13 10:33:16 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\BitTorrent [2008-12-22 20:10:15 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\DAEMON Tools [2008-12-22 20:11:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\DAEMON Tools Lite [2008-12-22 20:10:15 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\DAEMON Tools Pro [2009-09-13 10:29:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\DNA [2009-05-16 21:38:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\dvdcss [2008-09-05 03:03:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\Gadu-Gadu [2009-06-30 12:49:26 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\GanymedeNet [2009-01-26 13:09:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\Listonosz [2009-07-01 18:21:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\mIRC [2008-11-02 19:41:38 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\Nowe Gadu-Gadu [2009-01-26 13:09:28 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\Onet [2009-01-09 12:30:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\OpenOffice.org2 [2009-09-04 01:04:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\Opera [2008-12-22 20:53:38 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\SecuROM [2008-10-03 18:25:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\Tlen.pl [2009-09-09 21:21:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Dominika\Dane aplikacji\U3 [2008-09-05 22:38:09 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji [2008-09-04 17:41:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji [2001-07-22 02:17:50 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini [2009-09-13 09:39:39 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT [color=#E56717]========== Purity Check ==========[/color] < End of report >

**Posty:** 584 · przez **Andziorka** 13 Wrz 2009, 12:54

W okienko OTL wklej poniższy skrypt i klik na Run Fix:

:Processes
explorer.exe

:OTL
O4 - HKLM..\RunOnce: [CleanSetup] File not found
O33 - MountPoints2\{2ee7ebae-b290-11dd-8c7a-002269069682}\Shell - "" = AutoRun
O33 - MountPoints2\{2f6c6fea-ea22-11dd-8d1e-002269069682}\Shell - "" = Autorun
O33 - MountPoints2\H\Shell - "" = AutoRun

:Reg
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2]

:Commands
[emptytemp]
[start explorer]
[Reboot]

Daj loga po usuwaniu.

Wejdź w: Start --> Uruchom --> wpisz: regedit
Odszukaj klucza:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SessionManager\Memory Management\PrefetchParameters
po prawo powinno być: "EnablePrefetcher" kliknij 2 razy na to w dword, wpisz: 1
I restart.