Wolniejsze sciaganie, trojan horse, hacktool

**Posty:** 321 · przez **Dhogar** 23 Paź 2009, 23:01

Ostatnio transfer plikow diametralnie spadl. Nawet jesli jest to rapidshare premium predkosc wynois ok 40 kb a powinna 120 (tak bylo kiedys). Norton Anti-virus wykryl konia trojanskiego i hacktool, ale nie moze ich usnuac.

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:56:38, on 2009-10-23 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Common Files\Symantec Shared\ccProxy.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\WINDOWS\wicfte.exe C:\WINDOWS\wicfte.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Last.fm\LastFM.exe C:\Program Files\Norton Internet Security\Norton AntiVirus\NAVW32.EXE C:\Program Files\Nowe Gadu-Gadu\gg.exe C:\Program Files\Nowe Gadu-Gadu\spellchecker_gg.exe C:\Program Files\foobar2000\foobar2000.exe C:\Program Files\Symantec\LiveUpdate\ALUNOTIFY.EXE C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Pasiak\Moje dokumenty\Pobieranie\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/default R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.wow-europe.com/en/info/underdev/testrealm.html R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = : R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\Documents and Settings\Pasiak\Dane aplikacji\ATI_disp.exe, O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (file missing) O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [ATI Technologies] C:\Documents and Settings\Pasiak\Dane aplikacji\ATI_disp.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: Tibia Client.exe O4 - User Startup: Tibia Client.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

**Posty:** 18165 · przez **wojtas** 24 Paź 2009, 18:46

daj loga z OTL.. grasz w Tibie ?

**Posty:** 321 · przez **Dhogar** 24 Paź 2009, 20:11

Nie nie gram i nigdy nie gralem, a co?

OTL.txt:

Kod: Zaznacz wszystko: OTL logfile created on: 2009-10-24 19:48:08 - Run 2 OTL by OldTimer - Version 3.0.22.1 Folder = C:\Documents and Settings\Pasiak\Moje dokumenty\Pobieranie Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1023,23 Mb Total Physical Memory | 424,28 Mb Available Physical Memory | 41,47% Memory free 2,40 Gb Paging File | 1,77 Gb Available in Paging File | 73,65% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 14,65 Gb Total Space | 2,09 Gb Free Space | 14,26% Space Free | Partition Type: NTFS Drive D: | 48,83 Gb Total Space | 3,25 Gb Free Space | 6,65% Space Free | Partition Type: NTFS Drive E: | 48,83 Gb Total Space | 6,99 Gb Free Space | 14,32% Space Free | Partition Type: NTFS Drive F: | 36,74 Gb Total Space | 6,55 Gb Free Space | 17,82% Space Free | Partition Type: NTFS G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: PASIAKCO-878ACC Current User Name: Pasiak Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: On Skip Microsoft Files: On File Age = 30 Days Output = Standard Quick Scan [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2009-10-24 19:46:49 | 00,521,728 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Pasiak\Moje dokumenty\Pobieranie\OTL(2).exe PRC - [2009-10-24 19:33:02 | 00,521,728 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Pasiak\Pulpit\OTL.exe PRC - [2009-09-21 21:06:12 | 00,520,024 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe PRC - [2009-09-21 21:06:11 | 01,028,432 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe PRC - [2009-08-31 18:07:34 | 11,391,592 | ---- | M] (GG Network S.A.) -- C:\Program Files\Nowe Gadu-Gadu\gg.exe PRC - [2009-08-31 16:56:26 | 00,077,824 | ---- | M] () -- C:\Program Files\Nowe Gadu-Gadu\spellchecker_gg.exe PRC - [2009-08-24 22:23:38 | 00,908,280 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-08-11 04:38:08 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe PRC - [2009-08-11 04:38:08 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe PRC - [2009-08-10 11:53:03 | 01,119,888 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe PRC - [2009-07-14 13:34:58 | 00,168,004 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc32.exe PRC - [2009-06-07 14:28:34 | 01,648,640 | ---- | M] () -- C:\Program Files\foobar2000\foobar2000.exe PRC - [2009-03-19 17:11:24 | 01,138,688 | ---- | M] (Last.fm) -- C:\Program Files\Last.fm\LastFM.exe PRC - [2009-02-06 18:39:29 | 00,227,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wbem\wmiprvse.exe PRC - [2007-05-23 12:13:38 | 00,139,888 | ---- | M] (Symantec Corporation) -- C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe PRC - [2006-08-23 14:08:04 | 16,050,688 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTHDCPL.EXE PRC - [2006-07-25 18:03:42 | 00,100,032 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe PRC - [2006-07-25 18:03:42 | 00,067,264 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\ALUNOTIFY.EXE PRC - [2005-09-24 17:10:00 | 00,749,696 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE PRC - [2005-09-19 12:24:00 | 00,214,672 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe PRC - [2005-09-17 01:27:00 | 00,202,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccProxy.exe PRC - [2005-09-17 01:27:00 | 00,192,112 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe PRC - [2005-09-17 01:27:00 | 00,169,584 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe PRC - [2005-09-17 01:27:00 | 00,052,848 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccApp.exe PRC - [2005-09-15 17:21:00 | 01,160,800 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe PRC - [2004-08-04 00:55:54 | 01,667,584 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe PRC - [2004-08-04 00:44:26 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\notepad.exe PRC - [2004-08-04 00:44:20 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2001-10-26 19:30:04 | 00,016,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wbem\unsecapp.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2009-09-21 21:06:11 | 01,028,432 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service [Auto | Running]) SRV - [2009-08-11 04:38:08 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running]) SRV - [2009-08-10 11:53:03 | 01,119,888 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC [Auto | Running]) SRV - [2009-07-14 13:34:58 | 00,168,004 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc32.exe -- (NVSvc [Auto | Running]) SRV - [2008-07-29 21:10:04 | 00,046,104 | ---- | M] (Microsoft Corporation) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped]) SRV - [2008-07-29 19:24:50 | 00,881,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [Unknown | Stopped]) SRV - [2008-07-29 19:16:38 | 00,132,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped]) SRV - [2008-07-25 11:17:02 | 00,069,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) SRV - [2008-07-25 11:16:40 | 00,034,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped]) SRV - [2007-05-23 12:13:38 | 00,139,888 | ---- | M] (Symantec Corporation) -- C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe -- (navapsvc [Auto | Running]) SRV - [2006-07-25 18:03:42 | 02,119,360 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_0.EXE -- (LiveUpdate [On_Demand | Stopped]) SRV - [2006-07-25 18:03:42 | 00,100,032 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe -- (Automatic LiveUpdate Scheduler [Auto | Running]) SRV - [2005-10-22 19:28:00 | 00,045,696 | ---- | M] (Symantec Corporation) -- C:\Program Files\Norton Internet Security\comHost.exe -- (comHost [On_Demand | Stopped]) SRV - [2005-10-13 09:48:00 | 00,072,280 | ---- | M] (Symantec Corporation) -- C:\Program Files\Norton Internet Security\ccPwdSvc.exe -- (ccISPwdSvc [On_Demand | Stopped]) SRV - [2005-09-24 17:10:00 | 00,749,696 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE -- (NSCService [On_Demand | Running]) SRV - [2005-09-19 12:24:00 | 00,214,672 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe -- (SNDSrvc [Auto | Running]) SRV - [2005-09-17 01:27:00 | 00,202,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccProxy.exe -- (ccProxy [Auto | Running]) SRV - [2005-09-17 01:27:00 | 00,192,112 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe -- (ccEvtMgr [Auto | Running]) SRV - [2005-09-17 01:27:00 | 00,169,584 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe -- (ccSetMgr [Auto | Running]) SRV - [2005-09-15 17:21:00 | 01,160,800 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe -- (SPBBCSvc [Auto | Running]) SRV - [2005-08-26 15:22:00 | 00,198,368 | ---- | M] (Symantec Corporation) -- C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe -- (SAVScan [On_Demand | Stopped]) SRV - [2004-08-04 00:44:08 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running]) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found -- -- (cpuxp [On_Demand | Running]) DRV - [2009-09-18 20:55:03 | 00,717,296 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running]) DRV - [2009-09-14 21:16:53 | 00,064,160 | ---- | M] (Lavasoft AB) -- C:\WINDOWS\system32\DRIVERS\Lbd.sys -- (Lbd [Boot | Running]) DRV - [2009-08-27 10:00:00 | 00,371,248 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl [System | Running]) DRV - [2009-08-27 10:00:00 | 00,102,448 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv [On_Demand | Running]) DRV - [2009-08-25 10:00:00 | 01,323,568 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20091024.005\NAVEX15.SYS -- (NAVEX15 [On_Demand | Running]) DRV - [2009-08-25 10:00:00 | 00,084,912 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20091024.005\NAVENG.SYS -- (NAVENG [On_Demand | Running]) DRV - [2009-08-10 11:53:03 | 00,010,344 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\symlcbrd.sys -- (symlcbrd [Auto | Running]) DRV - [2009-07-14 20:54:00 | 07,741,664 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\DRIVERS\nv4_mini.sys -- (nv [On_Demand | Running]) DRV - [2009-07-03 21:22:32 | 00,251,768 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\SymcData\idsdefs\20091020.001\SymIDSCo.sys -- (SYMIDSCO [On_Demand | Running]) DRV - [2006-08-24 05:37:50 | 04,374,016 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys -- (IntcAzAudAddService [On_Demand | Running]) DRV - [2006-07-28 06:28:38 | 00,034,944 | R--- | M] (Attansic Technology corporation.) -- C:\WINDOWS\System32\DRIVERS\atl01_xp.sys -- (AtcL001 [On_Demand | Running]) DRV - [2005-09-19 12:23:00 | 00,196,240 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS -- (SYMTDI [System | Running]) DRV - [2005-09-19 12:23:00 | 00,109,200 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\SYMFW.SYS -- (SYMFW [On_Demand | Running]) DRV - [2005-09-19 12:23:00 | 00,031,888 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\SYMIDS.SYS -- (SYMIDS [On_Demand | Running]) DRV - [2005-09-19 12:23:00 | 00,027,792 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\SYMNDIS.SYS -- (SYMNDIS [On_Demand | Running]) DRV - [2005-09-19 12:23:00 | 00,024,720 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV [On_Demand | Running]) DRV - [2005-09-19 12:23:00 | 00,012,944 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\SYMDNS.SYS -- (SYMDNS [On_Demand | Running]) DRV - [2005-09-17 01:20:00 | 00,108,168 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\SYMEVENT.SYS -- (SymEvent [On_Demand | Running]) DRV - [2005-09-15 17:21:00 | 00,389,728 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv [System | Running]) DRV - [2005-08-26 15:22:00 | 00,334,984 | ---- | M] (Symantec Corporation) -- C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVRT.SYS -- (SAVRT [System | Running]) DRV - [2005-08-26 15:22:00 | 00,053,896 | ---- | M] (Symantec Corporation) -- C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVRTPEL.SYS -- (SAVRTPEL [System | Running]) DRV - [2005-01-07 17:07:18 | 00,138,752 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\System32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running]) DRV - [2004-08-13 04:56:20 | 00,005,810 | R--- | M] () -- C:\WINDOWS\System32\DRIVERS\ASACPI.sys -- (MTsensor [On_Demand | Running]) DRV - [2004-07-17 11:36:38 | 00,027,440 | ---- | M] () -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped]) DRV - [2004-04-27 09:26:48 | 00,005,824 | ---- | M] () -- C:\WINDOWS\System32\drivers\Asushwio.sys -- (Asushwio [On_Demand | Stopped]) DRV - [2001-08-17 23:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running]) [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2009-10-24 19:46:49 | 00,521,728 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Pasiak\Moje dokumenty\Pobieranie\OTL(2).exe MOD - [2005-09-23 19:38:00 | 00,123,488 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\AntiSpam\asOEHook.dll MOD - [2005-09-17 01:33:00 | 00,377,968 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccL40.dll MOD - [2004-08-04 00:42:34 | 01,050,624 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll MOD - [2003-03-18 21:14:00 | 00,499,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MSVCP71.dll MOD - [2003-02-21 05:42:00 | 00,348,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MSVCR71.dll [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKU\S-1-5-21-1547161642-854245398-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKU\S-1-5-21-1547161642-854245398-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKU\S-1-5-21-1547161642-854245398-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/default IE - HKU\S-1-5-21-1547161642-854245398-839522115-1003\S-1-5-21-1547161642-854245398-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1547161642-854245398-839522115-1003\S-1-5-21-1547161642-854245398-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = : [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "Ask.com" FF - prefs.js..browser.search.order.1: "Ask.com" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl:official" FF - prefs.js..extensions.enabledItems: firegestures@xuldev.org:1.5.4 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.1 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.3 FF - prefs.js..keyword.URL: "http://supertoolbar.ask.com/redirect?client=ff&src=kw&tb=SPC&o=15000&locale=en_US&q=" FF - prefs.js..network.proxy.backup.ftp: "2.47.164.114" FF - prefs.js..network.proxy.backup.ftp_port: 8888 FF - prefs.js..network.proxy.backup.gopher: "2.47.164.114" FF - prefs.js..network.proxy.backup.gopher_port: 8888 FF - prefs.js..network.proxy.backup.socks: "2.47.164.114" FF - prefs.js..network.proxy.backup.socks_port: 8888 FF - prefs.js..network.proxy.backup.ssl: "2.47.164.114" FF - prefs.js..network.proxy.backup.ssl_port: 8888 FF - prefs.js..network.proxy.ftp: "12.47.164.114" FF - prefs.js..network.proxy.ftp_port: 8888 FF - prefs.js..network.proxy.gopher: "12.47.164.114" FF - prefs.js..network.proxy.gopher_port: 8888 FF - prefs.js..network.proxy.http: "12.47.164.114" FF - prefs.js..network.proxy.http_port: 8888 FF - prefs.js..network.proxy.share_proxy_settings: true FF - prefs.js..network.proxy.socks: "12.47.164.114" FF - prefs.js..network.proxy.socks_port: 8888 FF - prefs.js..network.proxy.ssl: "12.47.164.114" FF - prefs.js..network.proxy.ssl_port: 8888 FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2009-08-11 04:38:09 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009-09-07 06:55:00 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009-10-20 15:44:55 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-10-02 20:15:52 | 00,000,000 | ---D | M] [2009-09-12 10:55:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\mozilla\Extensions [2009-09-12 10:55:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2009-10-23 20:36:13 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\mozilla\Firefox\Profiles\3h8lk3dh.default\extensions [2009-09-07 09:12:48 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\mozilla\Firefox\Profiles\3h8lk3dh.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2009-09-20 12:45:09 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\mozilla\Firefox\Profiles\3h8lk3dh.default\extensions\firegestures@xuldev.org [2009-09-06 02:36:47 | 00,002,234 | ---- | M] () -- C:\Documents and Settings\Pasiak\Dane aplikacji\Mozilla\FireFox\Profiles\3h8lk3dh.default\searchplugins\askcom.xml [2009-09-18 21:25:59 | 00,002,921 | ---- | M] () -- C:\Documents and Settings\Pasiak\Dane aplikacji\Mozilla\FireFox\Profiles\3h8lk3dh.default\searchplugins\daemon-search.xml [2009-10-23 20:36:13 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions [2009-10-02 20:15:52 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2009-08-11 04:38:17 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} [2009-08-24 22:23:38 | 00,023,544 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll [2009-08-24 22:23:38 | 00,137,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll [2009-08-11 04:38:09 | 00,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeploytk.dll [2009-08-24 22:23:38 | 00,065,016 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll [2003-05-15 10:01:48 | 00,133,376 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2009-08-24 21:19:13 | 00,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2009-08-24 21:19:13 | 00,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2009-08-24 21:19:13 | 00,002,371 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml [2009-08-24 21:19:13 | 00,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2009-08-24 21:19:13 | 00,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2009-08-24 21:19:13 | 00,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2009-08-24 21:19:13 | 00,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: (742 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (My Global Search Bar BHO) - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL File not found O2 - BHO: (CNisExtBho Class) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll (Symantec Corporation) O2 - BHO: (CNavExtBho Class) - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll (Symantec Corporation) O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O3 - HKLM\..\Toolbar: (Norton Internet Security 2006) - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll (Symantec Corporation) O3 - HKLM\..\Toolbar: (Norton AntiVirus) - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll (Symantec Corporation) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com) O3 - HKU\S-1-5-21-1547161642-854245398-839522115-1003\..\Toolbar\ShellBrowser: (Norton AntiVirus) - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll (Symantec Corporation) O3 - HKU\S-1-5-21-1547161642-854245398-839522115-1003\..\Toolbar\WebBrowser: (Norton Internet Security 2006) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll (Symantec Corporation) O3 - HKU\S-1-5-21-1547161642-854245398-839522115-1003\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com) O4 - HKLM..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft) O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNOTIFY.EXE (Symantec Corporation) O4 - HKLM..\Run: [ATI Technologies] C:\Documents and Settings\Pasiak\Dane aplikacji\ATI_disp.exe () O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe () O4 - HKLM..\Run: [RTHDCPL] C:\WINDOWS\RTHDCPL.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SkyTel] C:\WINDOWS\SkyTel.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [WinDefender] C:\WINDOWS\wicfte.exe File not found O4 - HKU\S-1-5-21-1547161642-854245398-839522115-1003..\Run: [ATI Technologies] C:\Documents and Settings\Pasiak\Dane aplikacji\ATI_disp.exe () O4 - HKU\S-1-5-21-1547161642-854245398-839522115-1003..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) O4 - HKU\S-1-5-21-1547161642-854245398-839522115-1003..\Run: [MSMSGS] C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O4 - Startup: C:\Documents and Settings\All Users\My applications\Tibia Client.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00 [binary data] O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00 [binary data] O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1547161642-854245398-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Documents) - File not found O20 - HKLM Winlogon: UserInit - (and) - File not found O20 - HKLM Winlogon: UserInit - (Settings\Pasiak\Dane) - File not found O20 - HKLM Winlogon: UserInit - (aplikacji\ATI_disp.exe) - File not found O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-08-10 11:39:13 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{b61bdf6d-8baf-11de-a61a-00173160f51a}\Shell\AutoRun\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ise64.exe -- File not found O33 - MountPoints2\{b61bdf6d-8baf-11de-a61a-00173160f51a}\Shell\open\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ise64.exe -- File not found O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - File not found O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe () O35 - comfile [open] -- "%1" %* File not found O35 - exefile [open] -- "%1" %* File not found [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [3 C:\WINDOWS\*.tmp files] [2009-10-06 19:37:43 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2009-10-19 16:31:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2009-10-13 18:00:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Pasiak\Dane aplikacji\EA [2009-10-01 22:17:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Pasiak\Dane aplikacji\Nowe Gadu-Gadu [2009-10-06 19:37:40 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Pasiak\Dane aplikacji\OpenFM [2009-09-30 19:56:06 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\Pasiak\Dane aplikacji\SecuROM [2009-10-20 06:49:57 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Pasiak\Dane aplikacji\teamspeak2 [2009-09-25 18:57:15 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Pasiak\Dane aplikacji\uTorrent [2009-10-19 16:32:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Pasiak\Dane aplikacji\Ventrilo [2009-10-01 22:21:00 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Pasiak\Ustawienia lokalne\Dane aplikacji\cache [2009-10-13 18:00:02 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Pasiak\Ustawienia lokalne\Dane aplikacji\Deployment [2009-10-13 17:49:50 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Pasiak\Ustawienia lokalne\Dane aplikacji\Unity [2009-10-19 16:29:26 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2009-10-01 22:17:46 | 00,000,000 | ---D | C] -- C:\Program Files\Nowe Gadu-Gadu [2009-10-05 18:50:27 | 00,000,000 | ---D | C] -- C:\Program Files\Total Video Converter [2009-10-13 17:49:45 | 00,000,000 | ---D | C] -- C:\Program Files\Unity [2009-09-25 18:58:25 | 00,000,000 | ---D | C] -- C:\Program Files\uTorrent [2009-10-19 16:30:38 | 00,000,000 | ---D | C] -- C:\Program Files\Ventrilo [2009-10-19 16:43:17 | 00,000,000 | ---D | C] -- C:\Program Files\Ventrilo Mix [2009-10-24 19:42:15 | 00,521,728 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Pasiak\Pulpit\OTL.exe [2009-09-29 16:29:37 | 00,000,000 | -HSD | C] -- C:\WINDOWS\ftpcache [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [1 C:\WINDOWS\System32\*.tmp files] [3 C:\WINDOWS\*.tmp files] [2009-10-24 19:33:02 | 00,521,728 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Pasiak\Pulpit\OTL.exe [2009-10-24 19:01:10 | 00,000,236 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job [2009-10-24 15:47:09 | 00,000,260 | ---- | M] () -- C:\WINDOWS\tasks\WGASetup.job [2009-10-24 15:46:53 | 00,243,457 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml [2009-10-24 15:46:42 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-10-24 15:46:29 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-10-24 14:41:03 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-10-24 01:50:31 | 00,025,600 | ---- | M] () -- C:\Documents and Settings\Pasiak\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-10-23 20:54:17 | 00,000,546 | ---- | M] () -- C:\WINDOWS\tasks\Norton AntiVirus - Run Full System Scan - Pasiak.job [2009-10-22 19:26:55 | 00,115,768 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2009-10-19 21:09:50 | 00,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job [2009-10-19 18:25:37 | 00,000,528 | ---- | M] () -- C:\WINDOWS\win.ini [2009-10-19 16:43:49 | 00,000,643 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Ventrilo Mix.lnk [2009-10-19 16:30:43 | 00,000,262 | ---- | M] () -- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini [2009-10-19 16:30:42 | 00,000,630 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Ventrilo.lnk [2009-10-19 16:29:36 | 00,000,000 | ---- | M] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\sa-mp-0.2X-u1_2-install(2).exe [2009-10-19 16:29:23 | 00,000,000 | ---- | M] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\sa-mp-0.2X-u1_2-install(1).exe [2009-10-19 16:29:05 | 00,000,000 | ---- | M] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\sa-mp-0.2X-u1_2-install.exe [2009-10-18 01:32:05 | 00,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2009-10-16 22:46:07 | 00,000,657 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\GTA San Andreas.lnk [2009-10-15 03:06:39 | 01,042,454 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2009-10-15 03:06:39 | 00,490,284 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2009-10-15 03:06:39 | 00,432,356 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2009-10-15 03:06:39 | 00,083,660 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2009-10-15 03:06:39 | 00,067,312 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2009-10-15 03:03:44 | 00,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2009-10-14 16:25:24 | 00,046,166 | ---- | M] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\gallery_5561_chupachups1.jpg [2009-10-14 16:23:55 | 00,028,161 | ---- | M] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\big.40196.9245736B-7864-43C4-8C23-4528D366CF6E.jpg [2009-10-13 21:46:30 | 00,357,865 | ---- | M] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\3g9wy.jpg [2009-10-13 18:00:33 | 00,016,896 | ---- | M] () -- C:\Documents and Settings\Pasiak\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2009-10-11 17:42:01 | 00,034,230 | ---- | M] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\delicje(2).gif [2009-10-05 18:50:32 | 00,000,664 | ---- | M] () -- C:\Documents and Settings\Pasiak\Pulpit\Total Video Player.lnk [2009-10-05 18:50:32 | 00,000,664 | ---- | M] () -- C:\Documents and Settings\Pasiak\Pulpit\Total Video Converter.lnk [2009-10-05 16:48:57 | 00,000,000 | ---- | M] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\MOV00795.mp4 [2009-10-03 13:12:58 | 00,004,109 | ---- | M] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\ISO1_DVD.nri [2009-10-02 21:50:58 | 00,000,020 | -H-- | M] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\VistaAct.rar.sha [2009-10-02 21:50:58 | 00,000,000 | ---- | M] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\VistaAct.rar [2009-10-02 20:15:55 | 00,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk [2009-10-01 22:19:29 | 00,000,717 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\OpenFM.lnk [2009-10-01 22:19:29 | 00,000,688 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Nowe Gadu-Gadu.lnk [2009-09-30 20:15:00 | 00,000,633 | ---- | M] () -- C:\Documents and Settings\Pasiak\Pulpit\Company of Heroes - Opposing Fronts.lnk [2009-09-25 18:58:32 | 00,000,630 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\µTorrent.lnk [color=#E56717]========== Files - No Company Name ==========[/color] [2009-10-19 16:43:49 | 00,000,643 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Ventrilo Mix.lnk [2009-10-19 16:30:42 | 00,000,630 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Ventrilo.lnk [2009-10-19 16:30:26 | 00,000,262 | ---- | C] () -- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini [2009-10-19 16:29:36 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\sa-mp-0.2X-u1_2-install(2).exe [2009-10-19 16:29:23 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\sa-mp-0.2X-u1_2-install(1).exe [2009-10-19 16:29:05 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\sa-mp-0.2X-u1_2-install.exe [2009-10-16 22:46:07 | 00,000,657 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\GTA San Andreas.lnk [2009-10-14 21:05:27 | 00,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job [2009-10-14 16:25:24 | 00,046,166 | ---- | C] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\gallery_5561_chupachups1.jpg [2009-10-14 16:23:55 | 00,028,161 | ---- | C] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\big.40196.9245736B-7864-43C4-8C23-4528D366CF6E.jpg [2009-10-13 21:46:28 | 00,357,865 | ---- | C] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\3g9wy.jpg [2009-10-11 17:42:00 | 00,034,230 | ---- | C] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\delicje(2).gif [2009-10-05 18:50:32 | 00,000,664 | ---- | C] () -- C:\Documents and Settings\Pasiak\Pulpit\Total Video Player.lnk [2009-10-05 18:50:32 | 00,000,664 | ---- | C] () -- C:\Documents and Settings\Pasiak\Pulpit\Total Video Converter.lnk [2009-10-05 16:48:57 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\MOV00795.mp4 [2009-10-03 13:12:58 | 00,004,109 | ---- | C] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\ISO1_DVD.nri [2009-10-03 13:11:34 | 01,035,090 | ---- | C] () -- C:\Documents and Settings\Pasiak\Pulpit\wrar361.exe [2009-10-02 21:50:58 | 00,000,020 | -H-- | C] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\VistaAct.rar.sha [2009-10-02 21:50:58 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\Pasiak\Moje dokumenty\VistaAct.rar [2009-10-01 22:19:29 | 00,000,717 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\OpenFM.lnk [2009-10-01 22:19:29 | 00,000,688 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Nowe Gadu-Gadu.lnk [2009-10-01 06:42:07 | 00,000,633 | ---- | C] () -- C:\Documents and Settings\Pasiak\Pulpit\Company of Heroes - Opposing Fronts.lnk [2009-09-25 20:59:54 | 11,998,159 | ---- | C] () -- C:\Documents and Settings\Pasiak\Pulpit\Majesty_2_-_Poradnik_Gry-OnLine.pdf [2009-09-25 18:58:32 | 00,000,630 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\µTorrent.lnk [2009-09-18 20:55:02 | 00,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009-09-11 00:37:00 | 00,094,208 | ---- | C] () -- C:\Documents and Settings\Pasiak\Dane aplikacji\ATI_disp.exe [2009-08-11 14:54:03 | 00,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009-08-10 13:28:26 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\desktop.ini [2009-08-10 13:13:20 | 00,025,600 | ---- | C] () -- C:\Documents and Settings\Pasiak\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-08-10 11:56:08 | 05,859,354 | -H-- | C] () -- C:\Documents and Settings\Pasiak\Ustawienia lokalne\Dane aplikacji\IconCache.db [2009-08-10 11:48:49 | 00,143,360 | R--- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2009-08-10 11:47:07 | 00,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys [2009-08-10 11:47:05 | 00,021,264 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini [2009-08-10 11:46:53 | 00,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2009-08-10 11:44:54 | 00,016,896 | ---- | C] () -- C:\Documents and Settings\Pasiak\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2009-08-10 11:44:06 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\Pasiak\Dane aplikacji\desktop.ini [2007-12-05 01:41:00 | 01,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2007-12-05 01:41:00 | 01,474,560 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2007-12-05 01:41:00 | 01,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2007-12-05 01:41:00 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2007-12-05 01:41:00 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2004-07-17 11:36:38 | 00,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys [2001-07-22 00:16:20 | 00,000,528 | ---- | C] () -- C:\WINDOWS\win.ini [2001-07-22 00:15:52 | 00,000,231 | ---- | C] () -- C:\WINDOWS\system.ini [color=#E56717]========== LOP Check ==========[/color] [2009-10-19 16:31:54 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji [2009-09-14 21:04:40 | 00,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{2BAE6915-8510-4B9F-B498-02DA86258AA0} [2009-08-20 11:10:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Blizzard [2009-08-20 11:10:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Blizzard Entertainment [2009-09-14 21:54:41 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Last.fm [2009-10-08 16:25:41 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2009-10-22 19:27:41 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2009-09-11 23:00:46 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\WNR [2009-08-10 13:28:26 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Default User\Dane aplikacji [2009-08-10 11:43:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji [2009-08-10 11:42:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji [2009-10-20 06:49:57 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji [2009-09-07 22:58:16 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\AccurateRip [2009-09-18 20:54:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\DAEMON Tools [2009-09-21 10:22:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\Desktopicon [2009-10-13 18:00:48 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\EA [2009-10-24 17:14:49 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\foobar2000 [2009-08-13 15:21:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\FreeStone Group [2009-08-10 17:31:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\Gadu-Gadu [2009-08-17 14:02:20 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\ImgBurn [2009-10-01 22:20:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\Nowe Gadu-Gadu [2009-10-06 19:37:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\OpenFM [2009-08-31 12:35:20 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\OpenOffice.org [2009-09-11 22:37:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\Opera [2009-09-30 19:56:06 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\SecuROM [2009-10-20 15:41:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\teamspeak2 [2009-09-27 08:57:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\uTorrent [2009-10-19 16:35:14 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\Ventrilo [2009-09-11 23:00:45 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Pasiak\Dane aplikacji\WNR [2009-10-19 21:09:50 | 00,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job [2001-07-22 00:17:50 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini [2009-10-23 20:54:17 | 00,000,546 | ---- | M] () -- C:\WINDOWS\Tasks\Norton AntiVirus - Run Full System Scan - Pasiak.job [2009-10-24 15:46:42 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT [2009-10-24 19:01:10 | 00,000,236 | ---- | M] () -- C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job [2009-10-24 15:47:09 | 00,000,260 | ---- | M] () -- C:\WINDOWS\Tasks\WGASetup.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:F86DDB28 < End of report >

**Posty:** 18165 · przez **wojtas** 25 Paź 2009, 11:30

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O2 - BHO: (My Global Search Bar BHO) - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL File not found
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKU\S-1-5-21-1547161642-854245398-839522115-1003\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O4 - HKLM..\Run: [WinDefender] C:\WINDOWS\wicfte.exe File not found
O4 - Startup: C:\Documents and Settings\All Users\My applications\Tibia Client.exe ()
O20 - HKLM Winlogon: UserInit - (C:\Documents) - File not found
O20 - HKLM Winlogon: UserInit - (and) - File not found
O20 - HKLM Winlogon: UserInit - (Settings\Pasiak\Dane) - File not found
O20 - HKLM Winlogon: UserInit - (aplikacji\ATI_disp.exe) - File not found
O33 - MountPoints2\{b61bdf6d-8baf-11de-a61a-00173160f51a}\Shell\AutoRun\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ise64.exe -- File not found
O33 - MountPoints2\{b61bdf6d-8baf-11de-a61a-00173160f51a}\Shell\open\command - "" = H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ise64.exe -- File not found

:Files
C:\Program Files\Ask.com

:Commands
[emptytemp]
[start explorer]
[Reboot]

Kliknij w Run Fix. I potwierdz reset kompa .

1.Uruchom OTL z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem]
4. zrób skan Malwarebytes Anti-Malware (usuń co znajdzie )

Autor postu otrzymał pochwałę

**Posty:** 321 · przez **Dhogar** 28 Paź 2009, 00:06

Dzieki juz wszystko gra.