Vbs nie dziala

[biigos]

Witam, mam komputer kolezanki, i nie moge za nic w swiecie puscic silent runnersa ani smit fraud poniewaz jest probem z vbs.

Zrobilem WSZYSTKO co tu jest napisane:
Problemy z uruchomieniem Silent Runners:

Kod: Zaznacz wszystko

1. Silent Runners jest całkowicie bezpieczny, dlatego jesli wasz antyvirus będzie alarmował, wyłączcie go na czas skanowania

2. Najczęszczym problemem jest wyłączony Windows Scripting Host, jest to komponent windowsa, który umożliwia nam uruchamianie plików z rozszerzeniem *.vbs. Przykładowymi błędami mogą być:

Po uruchomieniu silenta, nastepuje prośba o wskazanie programu, który ma go uruchomić.

"Dostęp do hosta skryptów systemu Windows jest wyłączony na tym komputerze"

By to skorygować należy ściągnąć noscript, jets to proste narzędzie od symenteca, którym możemy błyskawicznie właczyć i wyłączyć WSH.Naszym zadaniem jest włączyć, dlatego odpalamy noscript



Zmieniamy z disable na enable i...vuala.

3. Komunikat "Brak aparatu skryptów dla plików o rozszerzeniu vbs"

Mój komputer >>> Narzędzia >>> Opcje folderów >>> Typy plików

Na liście znajdujemy obecne rozszerzenie vbs >>> podświetlamyje i kasujemy. Następnie wybieramy opcję Nowe >>> wpisujemy nazwę VBS >>> klikamy Zaawansowane >>> w rozwijalnej liście wybieramy jako skojarzony typ VBSscript Script File >>> zatwierdzamy


i tyczace sie 3 punktu pytanie...tworze nowy vbs ale nie ma zaawansowanych VBSscript Script File..juz mi rece opadaj ....prosze o pomoc..

[ToServeAndProtect]

może zamieść log z OTL (instrukcja jest w przyklejonym temacie), może to coś innego powoduje a przy okazji się sprawdzi

[biigos]

Kod: Zaznacz wszystko

OTL logfile created on: 10/13/2009 20:49:01 - Run 1
OTL by OldTimer - Version 3.0.20.0     Folder = C:\Documents and Settings\Monolith\Desktop
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

502.05 Mb Total Physical Memory | 265.79 Mb Available Physical Memory | 52.94% Memory free
1.20 Gb Paging File | 0.88 Gb Available in Paging File | 73.33% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 9.74 Gb Total Space | 4.05 Gb Free Space | 41.56% Space Free | Partition Type: NTFS
Drive D: | 100.86 Gb Total Space | 2.04 Gb Free Space | 2.02% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: NOTEBOOK
Current User Name: Monolith
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: On
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2009/10/13 11:48:03 | 01,406,480 | ---- | M] (Trend Micro Incorporated) -- C:\Program Files\Trend Micro\Tmasy\tmasy.exe
PRC - [2009/10/12 22:24:52 | 00,520,704 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Monolith\Desktop\OTL.exe
PRC - [2009/06/23 19:40:49 | 00,133,104 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Monolith\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
PRC - [2009/04/08 18:42:06 | 03,534,855 | ---- | M] () -- C:\Documents and Settings\Monolith\Desktop\aa\stinger1001546.exe
PRC - [2007/01/23 00:26:58 | 00,040,960 | ---- | M] ( ) -- C:\Program Files\xpbattmon.exe
PRC - [2006/12/13 17:48:32 | 00,079,360 | ---- | M] (Opera Software) -- C:\Program Files\Opera\Opera.exe
PRC - [2006/07/20 16:15:32 | 00,593,920 | ---- | M] (Dritek System Inc.) -- C:\Program Files\Launch Manager\LManager.exe
PRC - [2006/06/26 16:47:48 | 00,331,776 | ---- | M] (Acer) -- C:\Program Files\Acer\OrbiCam\CameraAssistant.exe
PRC - [2006/06/23 11:40:58 | 00,086,016 | ---- | M] (Logitech) -- c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
PRC - [2006/06/23 11:39:54 | 00,225,280 | ---- | M] (Logitech) -- C:\WINDOWS\System32\LVCOMSX.EXE
PRC - [2006/04/14 18:42:56 | 00,344,064 | ---- | M] (Acer Incorporated) -- C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
PRC - [2006/03/23 06:17:50 | 00,118,784 | R--- | M] (Intel Corporation) -- C:\WINDOWS\System32\igfxpers.exe
PRC - [2006/03/23 06:17:42 | 00,094,208 | R--- | M] (Intel Corporation) -- C:\WINDOWS\System32\igfxext.exe
PRC - [2006/03/23 06:13:40 | 00,077,824 | R--- | M] (Intel Corporation) -- C:\WINDOWS\System32\hkcmd.exe
PRC - [2006/03/23 06:13:30 | 00,163,840 | R--- | M] (Intel Corporation) -- C:\WINDOWS\System32\igfxsrvc.exe
PRC - [2006/03/03 07:07:38 | 00,761,946 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
PRC - [2005/10/24 17:45:32 | 02,462,208 | ---- | M] (Avocent Inc.) -- C:\Acer\Empowering Technology\admtray.exe
PRC - [2005/10/24 17:40:52 | 01,314,816 | ---- | M] (Avocent Inc.) -- C:\Acer\Empowering Technology\admServ.exe
PRC - [2005/02/11 18:58:10 | 00,180,224 | ---- | M] () -- C:\Program Files\Clipboard\CLCL.exe
PRC - [2005/01/28 14:44:28 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfmgr.exe
PRC - [2004/11/01 19:22:22 | 00,262,144 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\System32\ElkCtrl.exe
PRC - [2004/08/04 00:56:58 | 00,218,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wbem\wmiprvse.exe
PRC - [2004/08/04 00:56:50 | 01,032,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2003/06/03 22:38:40 | 00,386,560 | ---- | M] (Y'z@Home) -- C:\Program Files\y\YzDock.exe
PRC - [2001/08/23 12:00:00 | 00,016,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wbem\unsecapp.exe

[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - File not found -- Service key not found. -- (osbypdo [Unknown | Stopped])
SRV - File not found -- Service key not found. -- (kjfwwaa [Unknown | Stopped])
SRV - File not found --  -- (aspnet_state [On_Demand | Stopped])
SRV - [2009/06/23 21:22:25 | 00,655,624 | ---- | M] (Acresso Software Inc.) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service [On_Demand | Stopped])
SRV - [2008/08/01 00:16:28 | 00,136,120 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc [On_Demand | Stopped])
SRV - [2007/01/21 13:30:39 | 00,069,632 | ---- | M] (Adobe Systems) -- C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe -- (Adobe LM Service [On_Demand | Stopped])
SRV - [2006/06/23 11:40:58 | 00,086,016 | ---- | M] (Logitech) -- c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe -- (LVPrcSrv [Auto | Running])
SRV - [2005/10/24 17:40:52 | 01,314,816 | ---- | M] (Avocent Inc.) -- C:\Acer\Empowering Technology\admServ.exe -- (AWService [Auto | Running])
SRV - [2005/01/28 14:44:28 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfmgr.exe -- (UMWdf [Auto | Running])

[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - [2009/10/13 11:48:03 | 00,076,560 | ---- | M] (Trend Micro Inc.) -- C:\WINDOWS\System32\drivers\tmcomm.sys -- (tmcomm [Auto | Running])
DRV - [2008/11/20 21:19:06 | 00,043,872 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running])
DRV - [2008/08/14 07:57:42 | 00,074,720 | ---- | M] (Adobe Systems, Inc.) -- C:\WINDOWS\System32\drivers\adfs.sys -- (adfs [Auto | Running])
DRV - [2008/06/27 16:40:18 | 01,315,776 | ---- | M] (Atheros Communications, Inc.) -- C:\WINDOWS\System32\DRIVERS\athw.sys -- (AR5416 [On_Demand | Running])
DRV - [2006/06/30 04:40:40 | 00,775,936 | R--- | M] (Bison Electronics. Inc. ) -- C:\WINDOWS\System32\Drivers\BisonCam.sys -- (Cam5603D [On_Demand | Running])
DRV - [2006/06/28 10:25:24 | 04,304,384 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys -- (IntcAzAudAddService [On_Demand | Running])
DRV - [2006/06/23 11:40:58 | 02,400,128 | ---- | M] () -- C:\WINDOWS\System32\drivers\lvmvdrv.sys -- (lvmvdrv [On_Demand | Stopped])
DRV - [2006/06/23 11:40:58 | 00,016,768 | ---- | M] () -- C:\WINDOWS\System32\drivers\LVPrcMon.sys -- (LVPrcMon [On_Demand | Running])
DRV - [2006/06/16 13:17:38 | 00,074,752 | R--- | M] (ENE Technology Inc.) -- C:\WINDOWS\System32\DRIVERS\ESM7SK.sys -- (ESMCR [On_Demand | Running])
DRV - [2006/06/16 13:17:38 | 00,040,064 | R--- | M] (ENE Technology Inc.) -- C:\WINDOWS\System32\DRIVERS\ESD7SK.sys -- (ESDCR [On_Demand | Running])
DRV - [2006/06/16 13:17:36 | 00,061,056 | R--- | M] (ENE Technology Inc.) -- C:\WINDOWS\System32\DRIVERS\EMS7SK.sys -- (EMSCR [On_Demand | Running])
DRV - [2006/03/23 06:47:06 | 01,166,972 | R--- | M] (Intel Corporation) -- C:\WINDOWS\System32\DRIVERS\ialmnt5.sys -- (ialm [On_Demand | Running])
DRV - [2006/03/03 06:52:30 | 00,192,672 | ---- | M] (Synaptics, Inc.) -- C:\WINDOWS\System32\DRIVERS\SynTP.sys -- (SynTP [On_Demand | Running])
DRV - [2006/01/25 04:44:52 | 00,488,448 | R--- | M] (Atheros Communications, Inc.) -- C:\WINDOWS\System32\DRIVERS\ar5211.sys -- (AR5211 [On_Demand | Stopped])
DRV - [2006/01/23 13:41:04 | 00,078,208 | ---- | M] (Acer Value Labs, USA) -- C:\WINDOWS\System32\drivers\epm-shd.sys -- (EpmShd [Auto | Running])
DRV - [2006/01/23 13:41:04 | 00,004,096 | ---- | M] (Acer Value Labs, USA) -- C:\WINDOWS\System32\drivers\epm-psd.sys -- (EpmPsd [Auto | Running])
DRV - [2005/10/31 08:17:00 | 00,045,312 | R--- | M] (Broadcom Corporation) -- C:\WINDOWS\System32\DRIVERS\bcm4sbxp.sys -- (bcm4sbxp [On_Demand | Stopped])
DRV - [2005/10/24 04:20:52 | 00,218,496 | R--- | M] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\DRIVERS\HSFHWAZL.sys -- (HSFHWAZL [On_Demand | Running])
DRV - [2005/10/18 10:53:24 | 00,998,656 | R--- | M] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\DRIVERS\HSF_DPV.sys -- (HSF_DPV [On_Demand | Running])
DRV - [2005/10/18 10:52:30 | 00,721,280 | R--- | M] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\DRIVERS\HSF_CNXT.sys -- (winachsf [On_Demand | Running])
DRV - [2005/10/15 19:20:44 | 00,012,106 | ---- | M] (OSA Technologies) -- C:\WINDOWS\System32\drivers\OsaFsLoc.sys -- (OsaFsLoc [System | Running])
DRV - [2005/10/05 09:57:08 | 00,012,544 | R--- | M] (Conexant) -- C:\WINDOWS\System32\DRIVERS\mdmxsdk.sys -- (mdmxsdk [Auto | Running])
DRV - [2005/09/13 16:34:40 | 00,004,392 | ---- | M] (OSA Technologies) -- C:\WINDOWS\System32\Drivers\NdisFilt.sys -- (NdisFilt [On_Demand | Running])
DRV - [2005/06/30 17:58:24 | 00,007,296 | ---- | M] (OSA Technologies, An Avocent Company) -- C:\WINDOWS\System32\drivers\osaio.sys -- (osaio [Auto | Running])
DRV - [2005/05/02 13:13:42 | 00,009,600 | ---- | M] () -- C:\WINDOWS\System32\DRIVERS\NETMNT.sys -- (NETMNT [On_Demand | Stopped])
DRV - [2005/03/28 00:05:00 | 00,006,400 | ---- | M] () -- C:\WINDOWS\System32\drivers\dhahelper.sys -- (DHAHELPER [System | Running])
DRV - [2005/01/14 16:57:16 | 00,004,010 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\System32\drivers\osanbm.sys -- (osanbm [Auto | Running])
DRV - [2005/01/07 18:07:18 | 00,138,752 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\System32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running])
DRV - [2004/12/08 08:10:00 | 00,016,896 | ---- | M] (Dritek System Inc.) -- C:\WINDOWS\System32\DRIVERS\DKbFltr.sys -- (DKbFltr [On_Demand | Running])
DRV - [2004/07/17 11:36:38 | 00,027,440 | ---- | M] () -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped])
DRV - [2004/03/02 17:37:50 | 00,125,184 | ---- | M] (Ahead Software AG) -- C:\WINDOWS\system32\DRIVERS\imagesrv.sys -- (imagesrv [Boot | Running])
DRV - [2004/03/02 17:37:48 | 00,005,504 | ---- | M] (Ahead Software AG) -- C:\WINDOWS\System32\Drivers\imagedrv.sys -- (imagedrv [Boot | Running])
DRV - [2001/08/23 12:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])

[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm


IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/

IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/

IE - HKU\S-1-5-21-1409082233-854245398-1801674531-500\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-21-1409082233-854245398-1801674531-500\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
IE - HKU\S-1-5-21-1409082233-854245398-1801674531-500\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-21-1409082233-854245398-1801674531-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
IE - HKU\S-1-5-21-1409082233-854245398-1801674531-500\S-1-5-21-1409082233-854245398-1801674531-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



O1 HOSTS File: (1216 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1            activate.adobe.com
O1 - Hosts: 127.0.0.1            practivate.adobe.com
O1 - Hosts: 127.0.0.1            ereg.adobe.com
O1 - Hosts: 127.0.0.1            activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1            wip3.adobe.com
O1 - Hosts: 127.0.0.1            3dns-3.adobe.com
O1 - Hosts: 127.0.0.1            3dns-2.adobe.com
O1 - Hosts: 127.0.0.1            adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1            adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1            adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1            ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1            activate-sea.adobe.com
O1 - Hosts: 127.0.0.1            wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1            activate-sjc0.adobe.com
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll File not found
O4 - HKLM..\Run: [Acer ePower Management] C:\Acer\Empowering Technology\ePower\Acer ePower Management.exe (Acer Value Labs, Taiwan)
O4 - HKLM..\Run: [ADMTray.exe] C:\Acer\Empowering Technology\admtray.exe (Avocent Inc.)
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe (Acer Incorporated)
O4 - HKLM..\Run: [igfxhkcmd] C:\WINDOWS\System32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [igfxpers] C:\WINDOWS\System32\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [igfxtray] C:\WINDOWS\System32\igfxtray.exe (Intel Corporation)
O4 - HKLM..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [LogitechCameraAssistant] C:\Program Files\Acer\OrbiCam\CameraAssistant.exe (Acer)
O4 - HKLM..\Run: [LogitechCameraService(E)] C:\WINDOWS\System32\ElkCtrl.exe (Logitech Inc.)
O4 - HKLM..\Run: [LogitechVideo[inspector]] C:\Program Files\Acer\OrbiCam\InstallHelper.exe (Acer)
O4 - HKLM..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE (Logitech)
O4 - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.)
O4 - HKU\S-1-5-21-1409082233-854245398-1801674531-500..\Run: [AdobeBridge]  File not found
O4 - HKU\S-1-5-21-1409082233-854245398-1801674531-500..\Run: [Google Update] C:\Documents and Settings\Monolith\Local Settings\Application Data\Google\Update\GoogleUpdate.exe (Google Inc.)
O4 - HKU\.DEFAULT..\RunOnce: [nltide_3] C:\WINDOWS\System32\advpack.DLL (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [nltide_3] C:\WINDOWS\System32\advpack.DLL (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [nltide_3] C:\WINDOWS\System32\advpack.DLL (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [nltide_3] C:\WINDOWS\System32\advpack.DLL (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\Monolith\Start Menu\Programs\Startup\Battery Monitor.lnk = C:\Program Files\xpbattmon.exe ( )
O4 - Startup: C:\Documents and Settings\Monolith\Start Menu\Programs\Startup\Clipboard.lnk = C:\Program Files\Clipboard\CLCL.exe ()
O4 - Startup: C:\Documents and Settings\Monolith\Start Menu\Programs\Startup\EphPod - Sync And Quit.lnk = C:\Program Files\EphPod\EphPod.exe File not found
O4 - Startup: C:\Documents and Settings\Monolith\Start Menu\Programs\Startup\EphPod Help.lnk = C:\Program Files\EphPod\ephpod2.hlp File not found
O4 - Startup: C:\Documents and Settings\Monolith\Start Menu\Programs\Startup\EphPod Read Me.lnk = C:\Program Files\EphPod\EphPod.txt File not found
O4 - Startup: C:\Documents and Settings\Monolith\Start Menu\Programs\Startup\EphPod.lnk = C:\Program Files\EphPod\EphPod.exe File not found
O4 - Startup: C:\Documents and Settings\Monolith\Start Menu\Programs\Startup\Trend Micro Anti-Spyware.lnk = C:\Program Files\Trend Micro\Tmasy\Tmasy.exe (Trend Micro Incorporated)
O4 - Startup: C:\Documents and Settings\Monolith\Start Menu\Programs\Startup\YzDock.lnk = C:\Program Files\y\YzDock.exe (Y'z@Home)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceClassicControlPanel = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsMenu = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsHistory = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogoff = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoUserNameInStartMenu = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceClassicControlPanel = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsMenu = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsHistory = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogoff = 0
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoUserNameInStartMenu = 1
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceClassicControlPanel = 1
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsMenu = 1
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsHistory = 1
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 1
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogoff = 0
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoUserNameInStartMenu = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceClassicControlPanel = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsMenu = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsHistory = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogoff = 0
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoUserNameInStartMenu = 1
O7 - HKU\S-1-5-21-1409082233-854245398-1801674531-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1409082233-854245398-1801674531-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-21-1409082233-854245398-1801674531-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-21-1409082233-854245398-1801674531-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsMenu = 1
O7 - HKU\S-1-5-21-1409082233-854245398-1801674531-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsHistory = 1
O7 - HKU\S-1-5-21-1409082233-854245398-1801674531-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogoff = 0
O7 - HKU\S-1-5-21-1409082233-854245398-1801674531-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-21-1409082233-854245398-1801674531-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoUserNameInStartMenu = 1
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office10\EXCEL.EXE (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O27 - HKLM IFEO\Your Image File Name Here without a path: Debugger -  File not found
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/01/21 11:25:29 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{354ded1c-6047-11de-abcf-0016d4674021}\Shell - "" = AutoRun
O33 - MountPoints2\{354ded1c-6047-11de-abcf-0016d4674021}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{354ded1d-6047-11de-abcf-0016d4674021}\Shell - "" = AutoRun
O33 - MountPoints2\{354ded1d-6047-11de-abcf-0016d4674021}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{354ded1e-6047-11de-abcf-00197d10dcd2}\Shell\AutoRun\command - "" = SYSTEM\S-1-5-21-1482476501-1644491937-682003330-1013\system32.exe
O33 - MountPoints2\{354ded1e-6047-11de-abcf-00197d10dcd2}\Shell\open\command - "" = SYSTEM\S-1-5-21-1482476501-1644491937-682003330-1013\system32.exe
O33 - MountPoints2\{c7f6d5a4-a4a6-11de-abe2-00197d10dcd2}\Shell - "" = AutoRun
O33 - MountPoints2\{c7f6d5a4-a4a6-11de-abe2-00197d10dcd2}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{eac59b57-7567-11de-abd9-0016d4674021}\Shell - "" = AutoRun
O33 - MountPoints2\{eac59b57-7567-11de-abd9-0016d4674021}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{eac59b58-7567-11de-abd9-0016d4674021}\Shell - "" = AutoRun
O33 - MountPoints2\{eac59b58-7567-11de-abd9-0016d4674021}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{eac59b5d-7567-11de-abd9-0016d4674021}\Shell - "" = AutoRun
O33 - MountPoints2\{eac59b5d-7567-11de-abd9-0016d4674021}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\H\Shell - "" = AutoRun
O33 - MountPoints2\H\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\I\Shell - "" = AutoRun
O33 - MountPoints2\I\Shell\AutoRun - "" = Auto&Play
O34 - HKLM BootExecute: (autocheck) -  File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) -  File not found
O35 - comfile [open] -- "%1" %* File not found
O35 - exefile [open] -- "%1" %* File not found

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2009/10/13 09:32:35 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Avg8
[2009/10/07 23:03:50 | 00,000,000 | ---D | C] -- C:\Program Files\AVG
[2009/10/13 11:48:02 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2009/10/13 20:47:50 | 00,520,704 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Monolith\Desktop\OTL.exe
[2009/10/13 19:52:48 | 00,000,000 | ---D | C] -- C:\temp
[2009/10/13 11:48:03 | 00,076,560 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\System32\drivers\tmcomm.sys
[2009/10/13 09:42:11 | 00,289,144 | ---- | C] (S!Ri) -- C:\WINDOWS\System32\VCCLSID.exe
[2009/10/13 09:42:11 | 00,288,417 | ---- | C] (S!Ri) -- C:\WINDOWS\System32\SrchSTS.exe
[2009/10/13 09:42:11 | 00,135,168 | ---- | C] (SteelWerX) -- C:\WINDOWS\System32\swreg.exe
[2009/10/13 09:42:11 | 00,087,552 | ---- | C] (S!Ri.URZ) -- C:\WINDOWS\System32\VACFix.exe
[2009/10/13 09:42:11 | 00,082,944 | ---- | C] (S!Ri.URZ) -- C:\WINDOWS\System32\IEDFix.exe
[2009/10/13 09:42:11 | 00,082,944 | ---- | C] (S!Ri.URZ) -- C:\WINDOWS\System32\IEDFix.C.exe
[2009/10/13 09:42:11 | 00,082,432 | ---- | C] (S!Ri.URZ) -- C:\WINDOWS\System32\404Fix.exe
[2009/10/13 09:42:11 | 00,080,384 | ---- | C] (S!Ri.URZ) -- C:\WINDOWS\System32\o4Patch.exe
[2009/10/13 09:42:11 | 00,079,360 | ---- | C] (SteelWerX) -- C:\WINDOWS\System32\swxcacls.exe
[2009/10/13 09:42:11 | 00,078,336 | ---- | C] (S!Ri.URZ) -- C:\WINDOWS\System32\Agent.OMZ.Fix.exe
[2009/10/13 09:42:11 | 00,053,248 | ---- | C] (http://www.beyondlogic.org) -- C:\WINDOWS\System32\Process.exe
[2009/10/13 09:32:43 | 00,000,000 | ---D | C] -- C:\!FixIEDef
[2009/10/13 09:24:07 | 00,000,000 | ---D | C] -- C:\hijack
[2009/10/13 09:22:00 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Monolith\Desktop\aa
[2009/10/13 09:20:50 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Monolith\Desktop\wszystko
[2008/12/23 14:10:14 | 00,520,192 | ---- | C] (Andrew Zhezherun) -- C:\Program Files\WinDjView-0.5.exe
[2008/12/23 14:10:13 | 00,217,088 | ---- | C] (65 Systems) -- C:\Program Files\SpaceMonger.exe
[2008/12/23 14:10:04 | 00,644,976 | ---- | C] (Sysinternals - www.sysinternals.com) -- C:\Program Files\autoruns.exe
[2008/12/23 14:10:04 | 00,589,824 | ---- | C] (Green Eclipse) -- C:\Program Files\eclipse.exe
[2008/12/23 13:30:28 | 00,833,984 | ---- | C] (TrueCrypt Foundation) -- C:\Program Files\TrueCrypt.exe
[2008/12/23 12:45:36 | 00,270,128 | ---- | C] (BitTorrent, Inc.) -- C:\Program Files\utorrent.exe
[2007/01/23 14:32:04 | 00,040,960 | ---- | C] ( ) -- C:\Program Files\xpbattmon.exe
[2007/01/21 13:02:50 | 01,238,544 | ---- | C] (Sysinternals) -- C:\Program Files\procexp.exe

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2 C:\WINDOWS\System32\*.tmp files]
[3 C:\WINDOWS\*.tmp files]
[2009/10/13 20:47:57 | 00,001,216 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\tmvsthfud.bin
[2009/10/13 20:47:56 | 00,001,216 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\tmvsthfss.bin
[2009/10/13 11:52:59 | 00,400,192 | ---- | M] () -- C:\Documents and Settings\Monolith\My Documents\Silent Runners (1).vbs
[2009/10/13 11:48:11 | 00,002,162 | ---- | M] () -- C:\WINDOWS\System32\tmmute.ini
[2009/10/13 11:48:05 | 00,000,789 | ---- | M] () -- C:\Documents and Settings\Monolith\Start Menu\Programs\Startup\Trend Micro Anti-Spyware.lnk
[2009/10/13 11:48:04 | 00,000,755 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Trend Micro Anti-Spyware.lnk
[2009/10/13 11:48:03 | 00,076,560 | ---- | M] (Trend Micro Inc.) -- C:\WINDOWS\System32\drivers\tmcomm.sys
[2009/10/13 11:45:19 | 00,003,196 | ---- | M] () -- C:\WINDOWS\System32\tmp.reg
[2009/10/13 11:45:17 | 00,001,216 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2009/10/13 09:59:38 | 00,127,432 | ---- | M] () -- C:\Documents and Settings\Monolith\Desktop\noscript.exe
[2009/10/13 09:51:28 | 00,400,192 | ---- | M] () -- C:\Documents and Settings\Monolith\My Documents\Silent Runners.vbs
[2009/10/13 09:45:00 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009/10/13 09:44:54 | 52,650,3936 | -HS- | M] () -- C:\hiberfil.sys
[2009/10/13 09:24:17 | 00,001,361 | ---- | M] () -- C:\Documents and Settings\Monolith\Desktop\HijackThis.lnk
[2009/10/12 22:24:52 | 00,520,704 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Monolith\Desktop\OTL.exe
[2009/10/11 19:30:03 | 00,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2009/10/11 12:02:54 | 00,000,162 | -H-- | M] () -- C:\Documents and Settings\Monolith\Desktop\~$mbrowicz Witold - Kosmos.rtf
[2009/10/07 23:10:28 | 00,003,288 | ---- | M] () -- C:\WINDOWS\WINCMD.INI
[2009/09/29 10:30:04 | 00,002,184 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[color=#E56717]========== Files - No Company Name ==========[/color]
[2009/10/13 11:52:36 | 00,400,192 | ---- | C] () -- C:\Documents and Settings\Monolith\My Documents\Silent Runners (1).vbs
[2009/10/13 11:48:05 | 00,002,162 | ---- | C] () -- C:\WINDOWS\System32\tmmute.ini
[2009/10/13 11:48:04 | 00,000,789 | ---- | C] () -- C:\Documents and Settings\Monolith\Start Menu\Programs\Startup\Trend Micro Anti-Spyware.lnk
[2009/10/13 11:48:04 | 00,000,755 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Trend Micro Anti-Spyware.lnk
[2009/10/13 11:41:29 | 00,127,432 | ---- | C] () -- C:\Documents and Settings\Monolith\Desktop\noscript.exe
[2009/10/13 09:51:22 | 00,400,192 | ---- | C] () -- C:\Documents and Settings\Monolith\My Documents\Silent Runners.vbs
[2009/10/13 09:43:18 | 00,003,196 | ---- | C] () -- C:\WINDOWS\System32\tmp.reg
[2009/10/13 09:42:11 | 00,075,776 | ---- | C] () -- C:\WINDOWS\System32\WS2Fix.exe
[2009/10/13 09:42:11 | 00,051,200 | ---- | C] () -- C:\WINDOWS\System32\dumphive.exe
[2009/10/13 09:42:11 | 00,040,960 | ---- | C] () -- C:\WINDOWS\System32\swsc.exe
[2009/10/13 09:24:17 | 00,001,361 | ---- | C] () -- C:\Documents and Settings\Monolith\Desktop\HijackThis.lnk
[2009/10/11 12:02:54 | 00,000,162 | -H-- | C] () -- C:\Documents and Settings\Monolith\Desktop\~$mbrowicz Witold - Kosmos.rtf
[2009/07/26 21:34:44 | 00,013,640 | ---- | C] () -- C:\Documents and Settings\Monolith\Application Data\GDIPFONTCACHEV1.DAT
[2008/12/26 01:41:15 | 00,000,600 | ---- | C] () -- C:\Documents and Settings\Monolith\Application Data\winscp.rnd
[2008/12/23 14:10:14 | 00,577,536 | ---- | C] () -- C:\Program Files\TpX.exe
[2007/01/28 03:15:34 | 00,015,190 | R--- | C] () -- C:\WINDOWS\M2000Twn.ini
[2007/01/28 03:08:10 | 00,000,719 | R--- | C] () -- C:\WINDOWS\System32\InstExec.ini
[2007/01/28 03:07:53 | 00,000,544 | ---- | C] () -- C:\WINDOWS\_delis32.ini
[2007/01/22 22:28:37 | 00,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll
[2007/01/21 20:57:31 | 00,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2007/01/21 20:33:39 | 00,765,952 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2007/01/21 20:33:39 | 00,558,592 | ---- | C] () -- C:\WINDOWS\System32\x264vfw.dll
[2007/01/21 20:33:39 | 00,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2007/01/21 20:33:37 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2007/01/21 19:58:16 | 00,552,960 | R--- | C] () -- C:\Program Files\Notepad2.exe
[2007/01/21 13:37:36 | 00,006,400 | ---- | C] () -- C:\WINDOWS\System32\drivers\dhahelper.sys
[2007/01/21 13:24:34 | 00,000,120 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2007/01/21 13:20:28 | 00,000,418 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2007/01/21 13:20:18 | 00,075,264 | ---- | C] () -- C:\WINDOWS\System32\WEP.dll
[2007/01/21 13:20:18 | 00,011,776 | ---- | C] () -- C:\WINDOWS\System32\WINPHK.DLL
[2007/01/21 13:05:43 | 00,000,129 | ---- | C] () -- C:\WINDOWS\winamp.ini
[2007/01/21 12:35:37 | 00,013,640 | ---- | C] () -- C:\Documents and Settings\Monolith\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2007/01/21 12:34:47 | 00,003,288 | ---- | C] () -- C:\WINDOWS\WINCMD.INI
[2007/01/21 12:19:40 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\desktop.ini
[2007/01/21 11:45:24 | 00,356,352 | R--- | C] () -- C:\WINDOWS\EMCRI.dll
[2007/01/21 11:29:13 | 07,458,704 | -H-- | C] () -- C:\Documents and Settings\Monolith\Local Settings\Application Data\IconCache.db
[2007/01/21 11:26:45 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\Monolith\Application Data\desktop.ini
[2006/06/23 11:40:58 | 02,400,128 | ---- | C] () -- C:\WINDOWS\System32\drivers\LVMVdrv.sys
[2006/06/23 11:40:58 | 00,016,768 | ---- | C] () -- C:\WINDOWS\System32\drivers\LVPrcMon.sys
[2005/05/02 13:13:42 | 00,009,600 | ---- | C] () -- C:\WINDOWS\System32\drivers\NETMNT.sys
[2004/08/04 00:56:44 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll
[2004/07/17 11:36:38 | 00,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys
[2001/08/23 12:00:00 | 00,000,307 | ---- | C] () -- C:\WINDOWS\win.ini
[2001/08/23 12:00:00 | 00,000,231 | ---- | C] () -- C:\WINDOWS\system.ini
[1999/01/27 14:39:06 | 00,065,024 | ---- | C] () -- C:\WINDOWS\System32\indounin.dll
[1997/06/13 08:56:08 | 00,056,832 | ---- | C] () -- C:\WINDOWS\System32\Iyvu9_32.dll

[color=#E56717]========== LOP Check ==========[/color]

[2009/10/13 09:32:35 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\All Users\Application Data
[2007/01/22 22:07:18 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Acer
[2009/06/23 21:35:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FLEXnet
[2007/01/21 12:19:40 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Default User\Application Data
[2007/01/21 11:26:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data
[2009/10/13 11:45:20 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Monolith\Application Data
[2007/01/22 22:07:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Monolith\Application Data\Acer
[2007/01/21 14:50:47 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Monolith\Application Data\Ahead
[2009/06/23 19:58:11 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Monolith\Application Data\ArcSoft
[2009/06/23 20:01:55 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Monolith\Application Data\Opera
[2007/01/21 12:33:28 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Monolith\Application Data\StarDict
[2007/01/21 11:26:38 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data

[color=#E56717]========== Purity Check ==========[/color]


< End of report >


Dodano 13.10.2009 21:01:30:
Pomoze ktos?

[wojtas]

1.Uruchom OTL z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem]
4. zrób skan Malwarebytes Anti-Malware (usuń co znajdzie )

[biigos]

dzieki wojtas, mam nadz ze to cos pomoze

Pozdrawiam!