Problem z otwarciem min. outlooka i gg

**Posty:** 72 · przez **ruszkos** 19 Gru 2009, 16:31

Witam
od 2 dni mam problem z otwieraniem niektórych aplikacji min. outlook, GG. Zaczęło się od tego że wyskoczyło jakieś okienko w którym odliczał sie czas do zamknięcia systemu. Wklejam loga z hijacka i liczę na pomoc

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 15:31:39, on 2009-12-19 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb10.exe C:\WINDOWS\AGRSMMSG.exe C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe C:\Program Files\ESET\ESET Smart Security\egui.exe C:\WINDOWS\SOUNDMAN.EXE D:\DMC-FZ10\quicktime\qttask.exe C:\Program Files\DNA\btdna.exe C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\System32\cisvc.exe C:\Program Files\ESET\ESET Smart Security\ekrn.exe C:\Program Files\borland\interbase\bin\ibguard.exe C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe C:\nagrywanie dvd\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\System32\nvsvc32.exe c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe C:\Program Files\borland\interbase\bin\ibserver.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\ALCFDRTM.EXE C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\gg\Nowe Gadu-Gadu\gg.exe C:\gg\Nowe Gadu-Gadu\spellchecker_gg.exe D:\Hijack, Silentrunner\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.bearshare.com/sidebar.html?src=ssb R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.bearshare.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: MediaBar - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\Program Files\BearShareTb\BearShareDx.dll O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - d:\bearshare\shareaza\razawebhook32.dll O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare\BearShareIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O2 - BHO: IEPluginBHO - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Ruszi\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll O3 - Toolbar: MediaBar - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\Program Files\BearShareTb\BearShareDx.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb10.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [WebAccelerator] "C:\Program Files\NetMeeting\Web Accelerator\webxl.exe" O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [QuickTime Task] "D:\DMC-FZ10\quicktime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\adobe\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKCU\..\Run: [Piracy] "C:\DOCUME~1\Ruszi\USTAWI~1\Temp\SysUtil.exe" /PIRACY O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe" O4 - HKCU\..\Run: [Prec] D:\panda\Prec\PrecStarter.exe O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [InternetCalls] "D:\telefon internetowy\InternetCalls\InternetCalls.exe" -nosplash -minimized O4 - Startup: siszyd32.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: Download with &Shareaza - res://d:\bearshare\shareaza\razawebhook32.dll/3000 O8 - Extra context menu item: Pobierz używając Download &Express'a - C:\Program Files\pobieranie plików\Download Express\Add_Url.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1162822461748 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1162822397545 O17 - HKLM\System\CCS\Services\Tcpip\..\{1DB3D1A0-57E2-4BA1-BB89-67937897F55E}: NameServer = 80.48.115.2 80.48.115.4 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: InterBase Guardian (InterBaseGuardian) - Inprise Corporation - C:\Program Files\borland\interbase\bin\ibguard.exe O23 - Service: InterBase Server (InterBaseServer) - Inprise Corporation - C:\Program Files\borland\interbase\bin\ibserver.exe O23 - Service: SQL Server (INSERTGT) (MSSQL$INSERTGT) - Unknown owner - c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sINSERTGT (file missing) O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMSAccessU - Unknown owner - C:\nagrywanie dvd\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

**Posty:** 10264 · przez **Mike** 19 Gru 2009, 16:47

ruszkos, wstaw jeszcze log z OTL, lub DSS'a => http://forum.programosy.pl/zasady-wstawiania-logow-vt93842.html

**Posty:** 72 · przez **ruszkos** 19 Gru 2009, 17:02

ok, juz daje log z OTL

Kod: Zaznacz wszystko: OTL logfile created on: 2009-12-19 15:56:27 - Run 1 OTL by OldTimer - Version 3.1.18.0 Folder = D:\Hijack, Silentrunner Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,25 Gb Total Physical Memory | 0,72 Gb Available Physical Memory | 57,59% Memory free 1,48 Gb Paging File | 1,08 Gb Available in Paging File | 72,54% Paging File free Paging file location(s): C:\pagefile.sys 384 1024 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 19,53 Gb Total Space | 0,79 Gb Free Space | 4,06% Space Free | Partition Type: NTFS Drive D: | 27,48 Gb Total Space | 5,05 Gb Free Space | 18,39% Space Free | Partition Type: FAT32 Drive E: | 27,51 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: FAT32 F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: RUSZI Current User Name: Ruszi Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: On Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2009-12-19 15:53:08 | 00,564,736 | ---- | M] (OldTimer Tools) -- D:\Hijack, Silentrunner\OTL.exe PRC - [2009-12-17 17:24:37 | 00,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-11-12 21:22:07 | 00,323,392 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\DNA\btdna.exe PRC - [2009-08-31 17:07:34 | 11,391,592 | ---- | M] (GG Network S.A.) -- C:\gg\Nowe Gadu-Gadu\gg.exe PRC - [2009-08-31 15:56:26 | 00,077,824 | ---- | M] () -- C:\gg\Nowe Gadu-Gadu\spellchecker_gg.exe PRC - [2008-12-03 12:47:34 | 01,205,760 | ---- | M] (Nokia) -- C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe PRC - [2008-11-11 09:38:06 | 00,620,544 | ---- | M] (Nokia.) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe PRC - [2008-09-19 08:52:04 | 00,130,560 | ---- | M] () -- C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe PRC - [2008-08-18 13:25:10 | 00,468,224 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe PRC - [2008-08-18 13:23:50 | 01,447,168 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe PRC - [2008-02-22 04:25:21 | 00,144,784 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe PRC - [2008-02-22 04:25:20 | 00,329,104 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe PRC - [2007-10-12 07:34:56 | 00,071,096 | ---- | M] () -- C:\nagrywanie dvd\CDBurnerXP\NMSAccessU.exe PRC - [2007-06-13 14:23:49 | 01,034,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-02-28 10:38:46 | 00,155,648 | ---- | M] (Apple Computer, Inc.) -- D:\DMC-FZ10\quicktime\qttask.exe PRC - [2007-02-10 05:29:56 | 00,089,968 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe PRC - [2007-02-10 05:29:48 | 00,242,544 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe PRC - [2006-11-06 14:18:39 | 00,060,416 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\ALCFDRTM.EXE PRC - [2004-08-04 00:44:30 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wscntfy.exe PRC - [2004-07-13 01:50:00 | 00,114,755 | R--- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe PRC - [2004-06-29 09:06:38 | 00,088,363 | ---- | M] (Agere Systems) -- C:\WINDOWS\AGRSMMSG.exe PRC - [2004-03-04 16:46:24 | 00,172,032 | ---- | M] (HP) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe PRC - [2004-02-18 18:55:28 | 00,049,152 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Hewlett-Packard\HP Software Update\hpwuSchd2.exe PRC - [2003-12-22 08:38:42 | 00,241,664 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\HP\hpcoretech\hpcmpmgr.exe PRC - [2003-08-15 08:34:50 | 00,057,344 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE PRC - [2002-12-17 16:26:22 | 07,520,337 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe PRC - [2000-06-23 05:00:00 | 01,702,400 | ---- | M] (Inprise Corporation) -- C:\Program Files\Borland\Interbase\Bin\ibserver.exe PRC - [2000-06-23 05:00:00 | 00,022,016 | ---- | M] (Inprise Corporation) -- C:\Program Files\Borland\Interbase\Bin\ibguard.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2009-12-19 15:53:08 | 00,564,736 | ---- | M] (OldTimer Tools) -- D:\Hijack, Silentrunner\OTL.exe MOD - [2006-08-25 16:51:13 | 01,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2008-11-11 09:38:06 | 00,620,544 | ---- | M] (Nokia.) [On_Demand | Running] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2008-08-18 13:30:58 | 00,019,200 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv) SRV - [2008-08-18 13:25:10 | 00,468,224 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn) SRV - [2007-10-12 07:34:56 | 00,071,096 | ---- | M] () [Auto | Running] -- C:\nagrywanie dvd\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU) SRV - [2007-02-10 05:29:56 | 00,089,968 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe -- (SQLWriter) SRV - [2007-02-10 05:29:54 | 29,178,224 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe -- (MSSQL$INSERTGT) SQL Server (INSERTGT) SRV - [2007-02-10 05:29:48 | 00,242,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe -- (SQLBrowser) SRV - [2006-10-09 22:11:08 | 00,724,992 | ---- | M] (Nero AG) [On_Demand | Stopped] -- C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe -- (NBService) SRV - [2005-10-14 02:50:20 | 00,045,272 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe -- (MSSQLServerADHelper) SRV - [2005-04-04 00:41:10 | 00,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT) SRV - [2004-08-04 00:44:28 | 00,026,112 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\skeys.exe -- (SerialKeys) SRV - [2004-07-13 01:50:00 | 00,114,755 | R--- | M] (NVIDIA Corporation) [Auto | Running] -- C:\WINDOWS\system32\nvsvc32.exe -- (NVSvc) SRV - [2002-12-17 16:26:22 | 07,520,337 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe -- (MSSQLSERVER) SRV - [2002-12-17 16:23:30 | 00,311,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE -- (SQLSERVERAGENT) SRV - [2000-06-23 05:00:00 | 01,702,400 | ---- | M] (Inprise Corporation) [On_Demand | Running] -- C:\Program Files\borland\interbase\bin\ibserver.exe -- (InterBaseServer) SRV - [2000-06-23 05:00:00 | 00,022,016 | ---- | M] (Inprise Corporation) [Auto | Running] -- C:\Program Files\borland\interbase\bin\ibguard.exe -- (InterBaseGuardian) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2009-12-18 19:45:49 | 00,000,000 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\aec.sys -- (aec) DRV - [2009-06-30 09:37:16 | 00,028,552 | ---- | M] (Panda Security, S.L.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\pavboot.sys -- (pavboot) DRV - [2008-09-15 07:56:34 | 00,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt) DRV - [2008-09-15 07:56:24 | 00,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2008-09-15 07:56:24 | 00,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2008-09-15 07:56:24 | 00,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2008-08-26 09:26:12 | 00,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008-08-18 12:27:42 | 00,054,280 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdi.sys -- (epfwtdi) DRV - [2008-08-18 12:27:40 | 00,030,728 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\epfwndis.sys -- (Epfwndis) DRV - [2008-08-18 12:27:36 | 00,071,688 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epfw.sys -- (epfw) DRV - [2008-08-18 12:19:26 | 00,053,256 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\easdrv.sys -- (easdrv) DRV - [2008-08-18 12:18:26 | 00,039,944 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon) DRV - [2008-04-06 12:06:17 | 00,047,360 | ---- | M] (VSO Software) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pcouffin.sys -- (pcouffin) DRV - [2008-02-01 15:17:12 | 00,138,112 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdnsu.sys -- (nmwcdnsu) DRV - [2007-11-13 11:25:55 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv) DRV - [2007-03-08 00:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20) DRV - [2006-08-29 15:56:20 | 00,032,377 | ---- | M] (B-phreaks) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\prodigy.sys -- (PRODIGY) DRV - [2004-08-03 23:08:44 | 00,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser.sys -- (usbser) DRV - [2004-08-03 23:08:22 | 00,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2004-07-13 01:50:00 | 02,459,968 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2004-06-29 09:07:18 | 01,268,204 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2003-08-15 08:53:12 | 00,462,684 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2003-08-14 16:16:38 | 00,404,736 | ---- | M] (Sensaura Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXSENS.SYS -- (ALCXSENS) DRV - [2003-03-19 08:51:00 | 00,018,688 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\nv_agp.sys -- (nv_agp) DRV - [2002-11-27 13:52:00 | 00,080,896 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENET.sys -- (NVENET) DRV - [2001-08-17 22:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-20\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1659004503-1229272821-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.bearshare.com/ IE - HKU\S-1-5-21-1659004503-1229272821-725345543-1003\S-1-5-21-1659004503-1229272821-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "BearShare Web Search" FF - prefs.js..browser.search.order.1: "BearShare Web Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "http://www.wp.pl/" FF - prefs.js..extensions.enabledItems: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8}:1.0.7 FF - prefs.js..extensions.enabledItems: {04CA07AB-7FC3-4110-A83F-EF1E6B75D5B0}:4.0.2 FF - prefs.js..keyword.URL: "http://search.bearshare.com/webResults.html?src=ffb&q=" FF - HKLM\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2009-02-17 12:49:36 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009-12-19 07:39:47 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-12-17 17:24:49 | 00,000,000 | ---D | M] [2008-10-01 17:56:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Extensions [2009-12-19 15:10:53 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\extensions [2009-08-01 09:05:08 | 00,000,000 | ---D | M] (Azerty III) -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\extensions\{04CA07AB-7FC3-4110-A83F-EF1E6B75D5B0} [2008-02-25 14:46:20 | 00,000,000 | ---D | M] (Winamp Toolbar) -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} [2008-03-01 15:19:33 | 00,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}-trash [2007-10-21 13:42:35 | 00,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\extensions\{0e477422-b71d-11db-8314-0800200c9a66} [2009-11-08 10:02:57 | 00,000,000 | ---D | M] (Stylish) -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8} [2008-12-18 17:19:41 | 00,000,000 | ---D | M] (Aero Silver Fox Basic) -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\extensions\{5c876f30-10ce-11dd-bd0b-0800200c9a66} [2004-01-01 00:09:33 | 00,000,000 | ---D | M] (MetaProducts Integration) -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\extensions\{D249FD00-4DF9-11D9-9FDC-0080481ADA61}(2) [2008-06-02 19:32:09 | 00,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\extensions\{D249FD00-4DF9-11D9-9FDC-0080481ADA61}-trash [2008-02-25 16:20:00 | 00,001,878 | ---- | M] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\searchplugins\aolsearch.xml [2009-07-18 00:02:48 | 00,002,476 | ---- | M] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\searchplugins\BearShareWebSearch.xml [2008-04-17 23:55:36 | 00,001,000 | ---- | M] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\searchplugins\FireSearch.xml [2009-02-26 19:43:06 | 00,001,994 | ---- | M] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\searchplugins\wrzuta.xml [2006-11-13 20:24:32 | 00,002,236 | ---- | M] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\searchplugins\wyszukiwarka-onetpl.xml [2009-12-17 12:20:59 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2008-09-04 01:11:24 | 00,054,600 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npbittorrent.dll [2004-01-14 12:07:00 | 01,925,120 | ---- | M] (Cycore AB) -- C:\Program Files\Mozilla Firefox\plugins\NPMCult3DP.dll [2007-12-11 09:07:00 | 00,307,200 | ---- | M] (ESKA) -- C:\Program Files\Mozilla Firefox\plugins\npOggX.dll [2009-10-31 17:23:27 | 00,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2009-07-18 00:02:48 | 00,002,476 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\BearShareWebSearch.xml [2009-10-31 17:23:27 | 00,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2009-10-31 17:23:27 | 00,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2009-10-31 17:23:27 | 00,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2009-10-31 17:23:27 | 00,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2009-10-31 17:23:27 | 00,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: (686 bytes) - C:\WINDOWS\system32\drivers\etc\HOSTS O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (MediaBar) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\Program Files\BearShareTb\BearShareDx.dll () O2 - BHO: (Shareaza Web Download Hook) - {0EEDB912-C5FA-486F-8334-57288578C627} - D:\bearshare\Shareaza\RazaWebHook32.dll (Shareaza Development Team) O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com) O2 - BHO: (UrlHelper Class) - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare\BearShareIEHelper.dll () O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Ruszi\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.) O3 - HKLM\..\Toolbar: (MediaBar) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\Program Files\BearShareTb\BearShareDx.dll () O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com) O3 - HKU\S-1-5-21-1659004503-1229272821-725345543-1003\..\Toolbar\WebBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com) O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\adobe\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AGRSMMSG] C:\WINDOWS\AGRSMMSG.exe (Agere Systems) O4 - HKLM..\Run: [BearShare] C:\Program Files\BearShare\BearShare.exe File not found O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET) O4 - HKLM..\Run: [HP Component Manager] C:\Program Files\HP\hpcoretech\hpcmpmgr.exe (Hewlett-Packard Company) O4 - HKLM..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe (Hewlett-Packard Company) O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe (HP) O4 - HKLM..\Run: [KernelFaultCheck] File not found O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe (NVIDIA Corporation) O4 - HKLM..\Run: [QuickTime Task] D:\DMC-FZ10\quicktime\qttask.exe (Apple Computer, Inc.) O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [WebAccelerator] C:\Program Files\NetMeeting\Web Accelerator\webxl.exe File not found O4 - HKU\.DEFAULT..\Run: [DWQueuedReporting] c:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE (Microsoft Corporation) O4 - HKU\S-1-5-18..\Run: [DWQueuedReporting] c:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE (Microsoft Corporation) O4 - HKU\S-1-5-21-1659004503-1229272821-725345543-1003..\Run: [BitTorrent DNA] C:\Program Files\DNA\btdna.exe (BitTorrent, Inc.) O4 - HKU\S-1-5-21-1659004503-1229272821-725345543-1003..\Run: [InternetCalls] D:\telefon internetowy\InternetCalls\InternetCalls.exe File not found O4 - HKU\S-1-5-21-1659004503-1229272821-725345543-1003..\Run: [PC Suite Tray] C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia) O4 - HKU\S-1-5-21-1659004503-1229272821-725345543-1003..\Run: [Piracy] C:\DOCUME~1\Ruszi\USTAWI~1\Temp\SysUtil.exe File not found O4 - HKU\S-1-5-21-1659004503-1229272821-725345543-1003..\Run: [Prec] D:\panda\Prec\PrecStarter.exe File not found O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation) O4 - Startup: C:\Documents and Settings\Ruszi\Menu Start\Programy\Autostart\siszyd32.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-21-1659004503-1229272821-725345543-1003\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-21-1659004503-1229272821-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1659004503-1229272821-725345543-1003_Classes\Software\Policies\Microsoft\Internet Explorer\Restrictions present O8 - Extra context menu item: Download with &Shareaza - d:\bearshare\shareaza\razawebhook32.dll (Shareaza Development Team) O8 - Extra context menu item: Pobierz używając Download &Express'a - C:\Program Files\pobieranie plików\Download Express\add_url.htm () O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\npjpi160_05.dll (Sun Microsystems, Inc.) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {00000055-9980-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/fhg.CAB (Reg Error: Key error.) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1162822461748 (WUWebControl Class) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1162822397545 (MUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Java Plug-in 1.5.0_06) O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01) O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02) O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03) O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O22 - SharedTaskScheduler: {8A5849C4-93F3-429D-FF34-660A2068897C} - OpenGL additional - Reg Error: Key error. File not found O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-11-06 12:42:20 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - comfile [open] -- "%1" %* O35 - exefile [open] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2009-12-17 19:49:02 | 00,028,552 | ---- | C] (Panda Security, S.L.) -- C:\WINDOWS\System32\drivers\pavboot.sys [2009-12-06 17:56:51 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Ruszi\Moje dokumenty\Shareaza Downloads [2009-12-06 17:56:51 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Ruszi\Ustawienia lokalne\Dane aplikacji\Shareaza [2009-12-06 17:56:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Ruszi\Dane aplikacji\Shareaza [2009-12-06 17:36:10 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Ruszi\Dane aplikacji\BearShareTb [2009-12-06 17:36:09 | 00,000,000 | ---D | C] -- C:\Program Files\BearShareTb [2009-12-03 20:37:39 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Ruszi\Pulpit\pobrane piosenki [2009-09-30 18:22:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Ahead [2009-04-22 19:37:46 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\ESET [2008-09-19 14:32:13 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\ESET [2008-07-09 19:20:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\PCHealth [2008-04-06 12:06:17 | 00,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Ruszi\Dane aplikacji\pcouffin.sys [2008-03-07 23:02:22 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft [2008-01-10 10:17:10 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft [2007-03-02 18:54:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Adobe [2006-11-09 15:04:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Adobe [2006-11-07 13:14:22 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft [2006-11-06 12:45:50 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft [2004-11-24 19:25:52 | 00,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [10 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2009-12-19 14:35:03 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-12-19 14:35:01 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-12-19 14:00:00 | 05,505,024 | ---- | M] () -- C:\Documents and Settings\Ruszi\ntuser.dat [2009-12-18 19:45:49 | 00,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\aec.sys [2009-12-17 15:46:04 | 00,000,142 | ---- | M] () -- C:\WINDOWS\System32\fjhdyfhsn.bat [2009-12-17 09:35:27 | 00,000,016 | ---- | M] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\fvgqad.dat [2009-12-17 09:34:54 | 00,000,004 | ---- | M] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\avdrn.dat [2009-12-13 20:17:44 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-12-06 20:13:24 | 00,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2009-12-06 19:44:37 | 01,701,750 | ---- | M] () -- C:\Documents and Settings\Ruszi\Moje dokumenty\SDC15277.JPG [2009-12-06 17:56:42 | 00,000,522 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Shareaza.lnk [2009-12-06 17:04:05 | 00,000,112 | ---- | M] () -- C:\Documents and Settings\Ruszi\default.pls [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [10 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2009-12-17 15:46:04 | 00,000,142 | ---- | C] () -- C:\WINDOWS\System32\fjhdyfhsn.bat [2009-12-17 09:35:03 | 00,000,016 | ---- | C] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\fvgqad.dat [2009-12-17 09:34:54 | 00,000,004 | ---- | C] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\avdrn.dat [2009-12-06 18:43:29 | 01,701,750 | ---- | C] () -- C:\Documents and Settings\Ruszi\Moje dokumenty\SDC15277.JPG [2009-12-06 17:56:42 | 00,000,522 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Shareaza.lnk [2009-05-11 16:20:19 | 00,076,407 | ---- | C] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\Smiley.ico [2009-02-26 20:09:33 | 00,002,272 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2008-06-26 17:57:18 | 00,020,992 | ---- | C] () -- C:\WINDOWS\jestertb.dll [2008-04-06 12:06:36 | 00,000,014 | ---- | C] () -- C:\WINDOWS\System32\systeminfo3.dll [2008-04-06 12:06:31 | 00,000,033 | ---- | C] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\pcouffin.log [2008-04-06 12:06:18 | 00,081,920 | ---- | C] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\ezpinst.exe [2008-04-06 12:06:17 | 00,007,176 | ---- | C] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\pcouffin.cat [2008-04-06 12:06:17 | 00,001,144 | ---- | C] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\pcouffin.inf [2007-05-10 18:20:41 | 00,001,691 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2007-03-29 22:00:40 | 00,203,264 | ---- | C] () -- C:\WINDOWS\System32\CddbCdda.dll [2007-02-09 19:07:19 | 00,000,018 | ---- | C] () -- C:\WINDOWS\gfact.ini [2007-01-31 23:05:56 | 00,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini [2006-12-28 20:08:51 | 00,001,617 | ---- | C] () -- C:\WINDOWS\VPlayer.INI [2006-11-08 19:45:24 | 00,000,427 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2006-11-08 11:19:13 | 00,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2006-11-07 17:50:22 | 00,000,610 | ---- | C] () -- C:\WINDOWS\naglos.INI [2006-11-07 13:06:20 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll [2006-11-06 15:28:16 | 00,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2006-11-06 13:56:48 | 00,000,038 | ---- | C] () -- C:\WINDOWS\AviSplitter.INI [2006-11-06 13:52:55 | 00,112,128 | ---- | C] () -- C:\Documents and Settings\Ruszi\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2006-11-06 13:00:02 | 00,010,282 | ---- | C] () -- C:\WINDOWS\hpdj3740.ini [2006-11-06 12:58:26 | 00,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\aec.sys [2006-11-06 12:57:56 | 00,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini [2006-11-06 12:53:57 | 00,000,015 | ---- | C] () -- C:\WINDOWS\wgedit.ini [2004-10-12 06:39:48 | 00,028,160 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll [2004-10-12 06:39:08 | 00,110,592 | ---- | C] () -- C:\WINDOWS\System32\ff_theora.dll [2004-10-09 06:40:16 | 00,454,144 | ---- | C] () -- C:\WINDOWS\System32\ff_x264.dll [2004-10-03 17:50:54 | 00,129,024 | ---- | C] () -- C:\WINDOWS\System32\ff_mpeg2enc.dll [2004-01-02 00:28:29 | 00,000,100 | ---- | C] () -- C:\WINDOWS\forevermopt.INI [2004-01-02 00:28:13 | 00,000,323 | ---- | C] () -- C:\WINDOWS\mafosav.INI [2004-01-01 23:05:12 | 00,092,400 | ---- | C] () -- C:\WINDOWS\ktkm7.dll [2004-01-01 23:05:12 | 00,058,192 | ---- | C] () -- C:\WINDOWS\ktkm6.dll [2004-01-01 23:05:12 | 00,055,186 | ---- | C] () -- C:\WINDOWS\ktkm5.dll [2004-01-01 23:05:12 | 00,030,166 | ---- | C] () -- C:\WINDOWS\ktkm9.dll [2004-01-01 23:05:12 | 00,023,364 | ---- | C] () -- C:\WINDOWS\ktkm8.dll [2004-01-01 23:05:12 | 00,022,926 | ---- | C] () -- C:\WINDOWS\ktkm4.dll [2004-01-01 23:05:11 | 00,268,621 | ---- | C] () -- C:\WINDOWS\ktkm33.dll [2004-01-01 23:05:11 | 00,098,442 | ---- | C] () -- C:\WINDOWS\ktkm35.dll [2004-01-01 23:05:11 | 00,082,542 | ---- | C] () -- C:\WINDOWS\ktkm37.dll [2004-01-01 23:05:11 | 00,020,926 | ---- | C] () -- C:\WINDOWS\ktkm36.dll [2004-01-01 23:05:11 | 00,010,240 | ---- | C] () -- C:\WINDOWS\ktkm34.dll [2004-01-01 23:05:10 | 00,326,441 | ---- | C] () -- C:\WINDOWS\ktkm32.dll [2004-01-01 23:05:10 | 00,197,408 | ---- | C] () -- C:\WINDOWS\ktkm29.dll [2004-01-01 23:05:10 | 00,128,042 | ---- | C] () -- C:\WINDOWS\ktkm30.dll [2004-01-01 23:05:10 | 00,116,841 | ---- | C] () -- C:\WINDOWS\ktkm26.dll [2004-01-01 23:05:10 | 00,100,786 | ---- | C] () -- C:\WINDOWS\ktkm28.dll [2004-01-01 23:05:10 | 00,081,427 | ---- | C] () -- C:\WINDOWS\ktkm31.dll [2004-01-01 23:05:10 | 00,065,092 | ---- | C] () -- C:\WINDOWS\ktkm27.dll [2004-01-01 23:05:10 | 00,022,657 | ---- | C] () -- C:\WINDOWS\ktkm3.dll [2004-01-01 23:05:09 | 00,538,410 | ---- | C] () -- C:\WINDOWS\ktkm20.dll [2004-01-01 23:05:09 | 00,524,537 | ---- | C] () -- C:\WINDOWS\ktkm18.dll [2004-01-01 23:05:09 | 00,370,880 | ---- | C] () -- C:\WINDOWS\ktkm22.dll [2004-01-01 23:05:09 | 00,126,720 | ---- | C] () -- C:\WINDOWS\ktkm23.dll [2004-01-01 23:05:09 | 00,070,888 | ---- | C] () -- C:\WINDOWS\ktkm19.dll [2004-01-01 23:05:09 | 00,066,908 | ---- | C] () -- C:\WINDOWS\ktkm17.dll [2004-01-01 23:05:09 | 00,064,070 | ---- | C] () -- C:\WINDOWS\ktkm21.dll [2004-01-01 23:05:09 | 00,056,992 | ---- | C] () -- C:\WINDOWS\ktkm24.dll [2004-01-01 23:05:09 | 00,049,094 | ---- | C] () -- C:\WINDOWS\ktkm25.dll [2004-01-01 23:05:09 | 00,020,974 | ---- | C] () -- C:\WINDOWS\ktkm2.dll [2004-01-01 23:05:08 | 00,803,601 | ---- | C] () -- C:\WINDOWS\ktkm16.dll [2004-01-01 23:05:08 | 00,524,164 | ---- | C] () -- C:\WINDOWS\ktkm12.dll [2004-01-01 23:05:08 | 00,307,617 | ---- | C] () -- C:\WINDOWS\ktkm15.dll [2004-01-01 23:05:08 | 00,209,936 | ---- | C] () -- C:\WINDOWS\ktkm14.dll [2004-01-01 23:05:08 | 00,099,867 | ---- | C] () -- C:\WINDOWS\ktkm13.dll [2004-01-01 23:05:08 | 00,096,166 | ---- | C] () -- C:\WINDOWS\ktkm1.dll [2004-01-01 23:05:08 | 00,062,631 | ---- | C] () -- C:\WINDOWS\ktkm11.dll [2004-01-01 23:05:08 | 00,058,015 | ---- | C] () -- C:\WINDOWS\ktkm10.dll [2002-10-06 18:42:58 | 00,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll [2002-10-04 23:04:26 | 00,921,600 | ---- | C] () -- C:\WINDOWS\System32\VorbisEnc.dll [2002-10-04 23:04:26 | 00,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll [2002-10-04 23:04:18 | 00,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll [1999-01-22 17:46:58 | 00,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL [1998-03-26 01:12:00 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\ZLIB.DLL [color=#E56717]========== LOP Check ==========[/color] [2007-03-01 10:29:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\MetaProducts [2009-05-11 17:38:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\1157 [2009-05-11 17:15:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\2834B [2009-05-11 21:24:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\6399 [2009-05-15 19:58:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\737A [2008-09-16 15:09:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET [2009-03-25 17:44:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\InsERT [2009-02-17 15:52:15 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations [2008-04-02 11:45:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nokia [2009-07-18 12:55:22 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2007-01-05 20:42:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Drivers Headquarters [2008-03-07 23:00:15 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite [2006-11-08 19:48:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SBT [2007-06-28 20:08:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Viewpoint [2007-03-01 10:29:48 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\MetaProducts [2009-12-06 19:13:30 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\BearShareTb [2009-03-10 21:32:00 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\BitTorrent [2009-12-19 15:55:15 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\DNA [2008-09-16 15:13:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\ESET [2009-06-02 17:08:39 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\Foxit [2008-04-08 12:35:56 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\Gadu-Gadu [2008-01-22 20:06:26 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\InsERT GT [2007-01-25 17:46:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\InternetCalls [2007-03-01 10:29:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\MetaProducts [2009-09-10 18:49:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\Nokia [2009-10-03 12:13:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\Nowe Gadu-Gadu [2009-07-18 12:55:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\OpenFM [2009-12-06 17:13:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\PC Suite [2009-12-06 17:56:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\Shareaza [2009-01-07 14:22:53 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\uTorrent [2008-04-06 12:11:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\Vso [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 16 bytes -> C:\Documents and Settings\Ruszi\Pulpit\pobrane piosenki:Shareaza.GUID @Alternate Data Stream - 16 bytes -> C:\Documents and Settings\Ruszi\Moje dokumenty\Shareaza Downloads:Shareaza.GUID < End of report >

**Posty:** 18165 · przez **wojtas** 19 Gru 2009, 17:46

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O2 - BHO: (MediaBar) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\Program Files\BearShareTb\BearShareDx.dll ()
O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O2 - BHO: (UrlHelper Class) - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare\BearShareIEHelper.dll ()
O3 - HKLM\..\Toolbar: (MediaBar) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\Program Files\BearShareTb\BearShareDx.dll ()
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKU\S-1-5-21-1659004503-1229272821-725345543-1003\..\Toolbar\WebBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [WebAccelerator] C:\Program Files\NetMeeting\Web Accelerator\webxl.exe File not found
O4 - HKU\S-1-5-21-1659004503-1229272821-725345543-1003..\Run: [InternetCalls] D:\telefon internetowy\InternetCalls\InternetCalls.exe File not found
O4 - HKU\S-1-5-21-1659004503-1229272821-725345543-1003..\Run: [Piracy] C:\DOCUME~1\Ruszi\USTAWI~1\Temp\SysUtil.exe File not found
O4 - HKU\S-1-5-21-1659004503-1229272821-725345543-1003..\Run: [Prec] D:\panda\Prec\PrecStarter.exe File not found
O4 - Startup: C:\Documents and Settings\Ruszi\Menu Start\Programy\Autostart\siszyd32.exe ()

:Files
C:\Documents and Settings\Ruszi\Dane aplikacji\BearShareTb
C:\Documents and Settings\Ruszi\Menu Start\Programy\Autostart\siszyd32.exe
C:\Program Files\BearShareTb
C:\Program Files\AskBarDis
C:\WINDOWS\System32\fjhdyfhsn.bat
C:\Documents and Settings\Ruszi\Dane aplikacji\fvgqad.dat
C:\Documents and Settings\Ruszi\Dane aplikacji\avdrn.dat

:Commands
[emptytemp]
[start explorer]
[Reboot]

Kliknij w Run Fix. I potwierdz reset kompa .

Następnie uruchamiasz OTL z opcją Run Scan. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia kompa

**Posty:** 72 · przez **ruszkos** 19 Gru 2009, 18:15

po zresetowaniu sie komputera wyskoczyło okienko notatnika a w nim taki wpis

Kod: Zaznacz wszystko: All processes killed Error: Unable to interpret <[emptytemp]> in the current context! Error: Unable to interpret <[start explorer]> in the current context! Error: Unable to interpret <[Reboot]> in the current context! OTL by OldTimer - Version 3.1.18.0 log created on 12192009_170533 Files\Folders moved on Reboot... C:\Documents and Settings\Ruszi\Menu Start\Programy\Autostart\siszyd32.exe moved successfully. Registry entries deleted on Reboot...

a tutaj nowy log z OTL

Kod: Zaznacz wszystko: OTL logfile created on: 2009-12-19 17:13:47 - Run 3 OTL by OldTimer - Version 3.1.18.0 Folder = D:\Hijack, Silentrunner Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,25 Gb Total Physical Memory | 0,79 Gb Available Physical Memory | 63,19% Memory free 1,48 Gb Paging File | 1,19 Gb Available in Paging File | 79,92% Paging File free Paging file location(s): C:\pagefile.sys 384 1024 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 19,53 Gb Total Space | 0,95 Gb Free Space | 4,84% Space Free | Partition Type: NTFS Drive D: | 27,48 Gb Total Space | 5,05 Gb Free Space | 18,36% Space Free | Partition Type: FAT32 Drive E: | 27,51 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: FAT32 F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: RUSZI Current User Name: Ruszi Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: On Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2009-12-19 15:53:08 | 00,564,736 | ---- | M] (OldTimer Tools) -- D:\Hijack, Silentrunner\OTL.exe PRC - [2009-12-17 17:24:37 | 00,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-11-12 21:22:07 | 00,323,392 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\DNA\btdna.exe PRC - [2008-12-03 12:47:34 | 01,205,760 | ---- | M] (Nokia) -- C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe PRC - [2008-11-11 09:38:06 | 00,620,544 | ---- | M] (Nokia.) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe PRC - [2008-09-19 08:52:04 | 00,130,560 | ---- | M] () -- C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe PRC - [2008-08-18 13:25:10 | 00,468,224 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe PRC - [2008-08-18 13:23:50 | 01,447,168 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe PRC - [2008-02-22 04:25:21 | 00,144,784 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe PRC - [2008-02-22 04:25:20 | 00,329,104 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe PRC - [2007-10-12 07:34:56 | 00,071,096 | ---- | M] () -- C:\nagrywanie dvd\CDBurnerXP\NMSAccessU.exe PRC - [2007-06-13 14:23:49 | 01,034,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-02-28 10:38:46 | 00,155,648 | ---- | M] (Apple Computer, Inc.) -- D:\DMC-FZ10\quicktime\qttask.exe PRC - [2007-02-10 05:29:56 | 00,089,968 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe PRC - [2007-02-10 05:29:48 | 00,242,544 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe PRC - [2004-08-04 00:44:30 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wscntfy.exe PRC - [2004-07-13 01:50:00 | 00,114,755 | R--- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe PRC - [2004-06-29 09:06:38 | 00,088,363 | ---- | M] (Agere Systems) -- C:\WINDOWS\AGRSMMSG.exe PRC - [2004-03-04 16:46:24 | 00,172,032 | ---- | M] (HP) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe PRC - [2004-02-18 18:55:28 | 00,049,152 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Hewlett-Packard\HP Software Update\hpwuSchd2.exe PRC - [2003-12-22 08:38:42 | 00,241,664 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\HP\hpcoretech\hpcmpmgr.exe PRC - [2003-08-15 08:34:50 | 00,057,344 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE PRC - [2002-12-17 16:26:22 | 07,520,337 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe PRC - [2000-06-23 05:00:00 | 01,702,400 | ---- | M] (Inprise Corporation) -- C:\Program Files\Borland\Interbase\Bin\ibserver.exe PRC - [2000-06-23 05:00:00 | 00,022,016 | ---- | M] (Inprise Corporation) -- C:\Program Files\Borland\Interbase\Bin\ibguard.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2009-12-19 15:53:08 | 00,564,736 | ---- | M] (OldTimer Tools) -- D:\Hijack, Silentrunner\OTL.exe MOD - [2006-08-25 16:51:13 | 01,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2008-11-11 09:38:06 | 00,620,544 | ---- | M] (Nokia.) [On_Demand | Running] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2008-08-18 13:30:58 | 00,019,200 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv) SRV - [2008-08-18 13:25:10 | 00,468,224 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn) SRV - [2007-10-12 07:34:56 | 00,071,096 | ---- | M] () [Auto | Running] -- C:\nagrywanie dvd\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU) SRV - [2007-02-10 05:29:56 | 00,089,968 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe -- (SQLWriter) SRV - [2007-02-10 05:29:54 | 29,178,224 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe -- (MSSQL$INSERTGT) SQL Server (INSERTGT) SRV - [2007-02-10 05:29:48 | 00,242,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe -- (SQLBrowser) SRV - [2006-10-09 22:11:08 | 00,724,992 | ---- | M] (Nero AG) [On_Demand | Stopped] -- C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe -- (NBService) SRV - [2005-10-14 02:50:20 | 00,045,272 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe -- (MSSQLServerADHelper) SRV - [2005-04-04 00:41:10 | 00,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT) SRV - [2004-08-04 00:44:28 | 00,026,112 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\skeys.exe -- (SerialKeys) SRV - [2004-07-13 01:50:00 | 00,114,755 | R--- | M] (NVIDIA Corporation) [Auto | Running] -- C:\WINDOWS\system32\nvsvc32.exe -- (NVSvc) SRV - [2002-12-17 16:26:22 | 07,520,337 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe -- (MSSQLSERVER) SRV - [2002-12-17 16:23:30 | 00,311,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE -- (SQLSERVERAGENT) SRV - [2000-06-23 05:00:00 | 01,702,400 | ---- | M] (Inprise Corporation) [On_Demand | Running] -- C:\Program Files\borland\interbase\bin\ibserver.exe -- (InterBaseServer) SRV - [2000-06-23 05:00:00 | 00,022,016 | ---- | M] (Inprise Corporation) [Auto | Running] -- C:\Program Files\borland\interbase\bin\ibguard.exe -- (InterBaseGuardian) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2009-12-18 19:45:49 | 00,000,000 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\aec.sys -- (aec) DRV - [2009-06-30 09:37:16 | 00,028,552 | ---- | M] (Panda Security, S.L.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\pavboot.sys -- (pavboot) DRV - [2008-09-15 07:56:34 | 00,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt) DRV - [2008-09-15 07:56:24 | 00,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2008-09-15 07:56:24 | 00,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2008-09-15 07:56:24 | 00,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2008-08-26 09:26:12 | 00,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008-08-18 12:27:42 | 00,054,280 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdi.sys -- (epfwtdi) DRV - [2008-08-18 12:27:40 | 00,030,728 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\epfwndis.sys -- (Epfwndis) DRV - [2008-08-18 12:27:36 | 00,071,688 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epfw.sys -- (epfw) DRV - [2008-08-18 12:19:26 | 00,053,256 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\easdrv.sys -- (easdrv) DRV - [2008-08-18 12:18:26 | 00,039,944 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon) DRV - [2008-04-06 12:06:17 | 00,047,360 | ---- | M] (VSO Software) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pcouffin.sys -- (pcouffin) DRV - [2008-02-01 15:17:12 | 00,138,112 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdnsu.sys -- (nmwcdnsu) DRV - [2007-11-13 11:25:55 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv) DRV - [2007-03-08 00:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20) DRV - [2006-08-29 15:56:20 | 00,032,377 | ---- | M] (B-phreaks) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\prodigy.sys -- (PRODIGY) DRV - [2004-08-03 23:08:44 | 00,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser.sys -- (usbser) DRV - [2004-08-03 23:08:22 | 00,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2004-07-13 01:50:00 | 02,459,968 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2004-06-29 09:07:18 | 01,268,204 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2003-08-15 08:53:12 | 00,462,684 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2003-08-14 16:16:38 | 00,404,736 | ---- | M] (Sensaura Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXSENS.SYS -- (ALCXSENS) DRV - [2003-03-19 08:51:00 | 00,018,688 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\nv_agp.sys -- (nv_agp) DRV - [2002-11-27 13:52:00 | 00,080,896 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENET.sys -- (NVENET) DRV - [2001-08-17 22:49:56 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-20\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1659004503-1229272821-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.bearshare.com/ IE - HKU\S-1-5-21-1659004503-1229272821-725345543-1003\S-1-5-21-1659004503-1229272821-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "BearShare Web Search" FF - prefs.js..browser.search.order.1: "BearShare Web Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "http://www.wp.pl/" FF - prefs.js..extensions.enabledItems: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8}:1.0.7 FF - prefs.js..extensions.enabledItems: {04CA07AB-7FC3-4110-A83F-EF1E6B75D5B0}:4.0.2 FF - prefs.js..keyword.URL: "http://search.bearshare.com/webResults.html?src=ffb&q=" FF - HKLM\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2009-02-17 12:49:36 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009-12-19 07:39:47 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-12-17 17:24:49 | 00,000,000 | ---D | M] [2008-10-01 17:56:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Extensions [2009-12-19 15:10:53 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\extensions [2009-08-01 09:05:08 | 00,000,000 | ---D | M] (Azerty III) -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\extensions\{04CA07AB-7FC3-4110-A83F-EF1E6B75D5B0} [2008-02-25 14:46:20 | 00,000,000 | ---D | M] (Winamp Toolbar) -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} [2008-03-01 15:19:33 | 00,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}-trash [2007-10-21 13:42:35 | 00,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\extensions\{0e477422-b71d-11db-8314-0800200c9a66} [2009-11-08 10:02:57 | 00,000,000 | ---D | M] (Stylish) -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8} [2008-12-18 17:19:41 | 00,000,000 | ---D | M] (Aero Silver Fox Basic) -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\extensions\{5c876f30-10ce-11dd-bd0b-0800200c9a66} [2004-01-01 00:09:33 | 00,000,000 | ---D | M] (MetaProducts Integration) -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\extensions\{D249FD00-4DF9-11D9-9FDC-0080481ADA61}(2) [2008-06-02 19:32:09 | 00,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\extensions\{D249FD00-4DF9-11D9-9FDC-0080481ADA61}-trash [2008-02-25 16:20:00 | 00,001,878 | ---- | M] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\searchplugins\aolsearch.xml [2009-07-18 00:02:48 | 00,002,476 | ---- | M] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\searchplugins\BearShareWebSearch.xml [2008-04-17 23:55:36 | 00,001,000 | ---- | M] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\searchplugins\FireSearch.xml [2009-02-26 19:43:06 | 00,001,994 | ---- | M] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\searchplugins\wrzuta.xml [2006-11-13 20:24:32 | 00,002,236 | ---- | M] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\Mozilla\Firefox\Profiles\mw01bfip.default\searchplugins\wyszukiwarka-onetpl.xml [2009-12-19 15:10:53 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2008-09-04 01:11:24 | 00,054,600 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npbittorrent.dll [2004-01-14 12:07:00 | 01,925,120 | ---- | M] (Cycore AB) -- C:\Program Files\Mozilla Firefox\plugins\NPMCult3DP.dll [2007-12-11 09:07:00 | 00,307,200 | ---- | M] (ESKA) -- C:\Program Files\Mozilla Firefox\plugins\npOggX.dll [2009-10-31 17:23:27 | 00,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2009-07-18 00:02:48 | 00,002,476 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\BearShareWebSearch.xml [2009-10-31 17:23:27 | 00,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2009-10-31 17:23:27 | 00,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2009-10-31 17:23:27 | 00,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2009-10-31 17:23:27 | 00,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2009-10-31 17:23:27 | 00,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: (686 bytes) - C:\WINDOWS\system32\drivers\etc\HOSTS O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Shareaza Web Download Hook) - {0EEDB912-C5FA-486F-8334-57288578C627} - D:\bearshare\Shareaza\RazaWebHook32.dll (Shareaza Development Team) O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Ruszi\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.) O3 - HKU\S-1-5-21-1659004503-1229272821-725345543-1003\..\Toolbar\WebBrowser: (no name) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - No CLSID value found. O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\adobe\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AGRSMMSG] C:\WINDOWS\AGRSMMSG.exe (Agere Systems) O4 - HKLM..\Run: [BearShare] C:\Program Files\BearShare\BearShare.exe File not found O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET) O4 - HKLM..\Run: [HP Component Manager] C:\Program Files\HP\hpcoretech\hpcmpmgr.exe (Hewlett-Packard Company) O4 - HKLM..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe (Hewlett-Packard Company) O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe (HP) O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe (NVIDIA Corporation) O4 - HKLM..\Run: [QuickTime Task] D:\DMC-FZ10\quicktime\qttask.exe (Apple Computer, Inc.) O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe (Sun Microsystems, Inc.) O4 - HKU\.DEFAULT..\Run: [DWQueuedReporting] c:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE (Microsoft Corporation) O4 - HKU\S-1-5-18..\Run: [DWQueuedReporting] c:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE (Microsoft Corporation) O4 - HKU\S-1-5-21-1659004503-1229272821-725345543-1003..\Run: [BitTorrent DNA] C:\Program Files\DNA\btdna.exe (BitTorrent, Inc.) O4 - HKU\S-1-5-21-1659004503-1229272821-725345543-1003..\Run: [PC Suite Tray] C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-21-1659004503-1229272821-725345543-1003\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-21-1659004503-1229272821-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1659004503-1229272821-725345543-1003_Classes\Software\Policies\Microsoft\Internet Explorer\Restrictions present O8 - Extra context menu item: Download with &Shareaza - d:\bearshare\shareaza\razawebhook32.dll (Shareaza Development Team) O8 - Extra context menu item: Pobierz używając Download &Express'a - C:\Program Files\pobieranie plików\Download Express\add_url.htm () O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\npjpi160_05.dll (Sun Microsystems, Inc.) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {00000055-9980-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/fhg.CAB (Reg Error: Key error.) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1162822461748 (WUWebControl Class) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1162822397545 (MUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Java Plug-in 1.5.0_06) O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01) O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02) O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03) O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O22 - SharedTaskScheduler: {8A5849C4-93F3-429D-FF34-660A2068897C} - OpenGL additional - Reg Error: Key error. File not found O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-11-06 12:42:20 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - comfile [open] -- "%1" %* O35 - exefile [open] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2009-12-17 19:49:02 | 00,028,552 | ---- | C] (Panda Security, S.L.) -- C:\WINDOWS\System32\drivers\pavboot.sys [2009-12-06 17:56:51 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Ruszi\Moje dokumenty\Shareaza Downloads [2009-12-06 17:56:51 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Ruszi\Ustawienia lokalne\Dane aplikacji\Shareaza [2009-12-06 17:56:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Ruszi\Dane aplikacji\Shareaza [2009-12-03 20:37:39 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Ruszi\Pulpit\pobrane piosenki [2009-09-30 18:22:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Ahead [2009-04-22 19:37:46 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\ESET [2008-09-19 14:32:13 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\ESET [2008-07-09 19:20:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\PCHealth [2008-04-06 12:06:17 | 00,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Ruszi\Dane aplikacji\pcouffin.sys [2008-03-07 23:02:22 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft [2008-01-10 10:17:10 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft [2007-03-02 18:54:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Adobe [2006-11-09 15:04:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Adobe [2006-11-07 13:14:22 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft [2006-11-06 12:45:50 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft [2004-11-24 19:25:52 | 00,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [10 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2009-12-19 17:07:00 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009-12-19 17:06:58 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009-12-19 17:06:20 | 05,505,024 | ---- | M] () -- C:\Documents and Settings\Ruszi\ntuser.dat [2009-12-18 19:45:49 | 00,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\aec.sys [2009-12-13 20:17:44 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009-12-06 20:13:24 | 00,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2009-12-06 19:44:37 | 01,701,750 | ---- | M] () -- C:\Documents and Settings\Ruszi\Moje dokumenty\SDC15277.JPG [2009-12-06 17:56:42 | 00,000,522 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Shareaza.lnk [2009-12-06 17:04:05 | 00,000,112 | ---- | M] () -- C:\Documents and Settings\Ruszi\default.pls [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [10 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2009-12-06 18:43:29 | 01,701,750 | ---- | C] () -- C:\Documents and Settings\Ruszi\Moje dokumenty\SDC15277.JPG [2009-12-06 17:56:42 | 00,000,522 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Shareaza.lnk [2009-05-11 16:20:19 | 00,076,407 | ---- | C] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\Smiley.ico [2009-02-26 20:09:33 | 00,002,272 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2008-06-26 17:57:18 | 00,020,992 | ---- | C] () -- C:\WINDOWS\jestertb.dll [2008-04-06 12:06:36 | 00,000,014 | ---- | C] () -- C:\WINDOWS\System32\systeminfo3.dll [2008-04-06 12:06:31 | 00,000,033 | ---- | C] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\pcouffin.log [2008-04-06 12:06:18 | 00,081,920 | ---- | C] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\ezpinst.exe [2008-04-06 12:06:17 | 00,007,176 | ---- | C] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\pcouffin.cat [2008-04-06 12:06:17 | 00,001,144 | ---- | C] () -- C:\Documents and Settings\Ruszi\Dane aplikacji\pcouffin.inf [2007-05-10 18:20:41 | 00,001,691 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2007-03-29 22:00:40 | 00,203,264 | ---- | C] () -- C:\WINDOWS\System32\CddbCdda.dll [2007-02-09 19:07:19 | 00,000,018 | ---- | C] () -- C:\WINDOWS\gfact.ini [2007-01-31 23:05:56 | 00,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini [2006-12-28 20:08:51 | 00,001,617 | ---- | C] () -- C:\WINDOWS\VPlayer.INI [2006-11-08 19:45:24 | 00,000,427 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2006-11-08 11:19:13 | 00,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2006-11-07 17:50:22 | 00,000,610 | ---- | C] () -- C:\WINDOWS\naglos.INI [2006-11-07 13:06:20 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll [2006-11-06 15:28:16 | 00,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2006-11-06 13:56:48 | 00,000,038 | ---- | C] () -- C:\WINDOWS\AviSplitter.INI [2006-11-06 13:52:55 | 00,112,128 | ---- | C] () -- C:\Documents and Settings\Ruszi\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2006-11-06 13:00:02 | 00,010,282 | ---- | C] () -- C:\WINDOWS\hpdj3740.ini [2006-11-06 12:58:26 | 00,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\aec.sys [2006-11-06 12:57:56 | 00,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini [2006-11-06 12:53:57 | 00,000,015 | ---- | C] () -- C:\WINDOWS\wgedit.ini [2004-10-12 06:39:48 | 00,028,160 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll [2004-10-12 06:39:08 | 00,110,592 | ---- | C] () -- C:\WINDOWS\System32\ff_theora.dll [2004-10-09 06:40:16 | 00,454,144 | ---- | C] () -- C:\WINDOWS\System32\ff_x264.dll [2004-10-03 17:50:54 | 00,129,024 | ---- | C] () -- C:\WINDOWS\System32\ff_mpeg2enc.dll [2004-01-02 00:28:29 | 00,000,100 | ---- | C] () -- C:\WINDOWS\forevermopt.INI [2004-01-02 00:28:13 | 00,000,323 | ---- | C] () -- C:\WINDOWS\mafosav.INI [2004-01-01 23:05:12 | 00,092,400 | ---- | C] () -- C:\WINDOWS\ktkm7.dll [2004-01-01 23:05:12 | 00,058,192 | ---- | C] () -- C:\WINDOWS\ktkm6.dll [2004-01-01 23:05:12 | 00,055,186 | ---- | C] () -- C:\WINDOWS\ktkm5.dll [2004-01-01 23:05:12 | 00,030,166 | ---- | C] () -- C:\WINDOWS\ktkm9.dll [2004-01-01 23:05:12 | 00,023,364 | ---- | C] () -- C:\WINDOWS\ktkm8.dll [2004-01-01 23:05:12 | 00,022,926 | ---- | C] () -- C:\WINDOWS\ktkm4.dll [2004-01-01 23:05:11 | 00,268,621 | ---- | C] () -- C:\WINDOWS\ktkm33.dll [2004-01-01 23:05:11 | 00,098,442 | ---- | C] () -- C:\WINDOWS\ktkm35.dll [2004-01-01 23:05:11 | 00,082,542 | ---- | C] () -- C:\WINDOWS\ktkm37.dll [2004-01-01 23:05:11 | 00,020,926 | ---- | C] () -- C:\WINDOWS\ktkm36.dll [2004-01-01 23:05:11 | 00,010,240 | ---- | C] () -- C:\WINDOWS\ktkm34.dll [2004-01-01 23:05:10 | 00,326,441 | ---- | C] () -- C:\WINDOWS\ktkm32.dll [2004-01-01 23:05:10 | 00,197,408 | ---- | C] () -- C:\WINDOWS\ktkm29.dll [2004-01-01 23:05:10 | 00,128,042 | ---- | C] () -- C:\WINDOWS\ktkm30.dll [2004-01-01 23:05:10 | 00,116,841 | ---- | C] () -- C:\WINDOWS\ktkm26.dll [2004-01-01 23:05:10 | 00,100,786 | ---- | C] () -- C:\WINDOWS\ktkm28.dll [2004-01-01 23:05:10 | 00,081,427 | ---- | C] () -- C:\WINDOWS\ktkm31.dll [2004-01-01 23:05:10 | 00,065,092 | ---- | C] () -- C:\WINDOWS\ktkm27.dll [2004-01-01 23:05:10 | 00,022,657 | ---- | C] () -- C:\WINDOWS\ktkm3.dll [2004-01-01 23:05:09 | 00,538,410 | ---- | C] () -- C:\WINDOWS\ktkm20.dll [2004-01-01 23:05:09 | 00,524,537 | ---- | C] () -- C:\WINDOWS\ktkm18.dll [2004-01-01 23:05:09 | 00,370,880 | ---- | C] () -- C:\WINDOWS\ktkm22.dll [2004-01-01 23:05:09 | 00,126,720 | ---- | C] () -- C:\WINDOWS\ktkm23.dll [2004-01-01 23:05:09 | 00,070,888 | ---- | C] () -- C:\WINDOWS\ktkm19.dll [2004-01-01 23:05:09 | 00,066,908 | ---- | C] () -- C:\WINDOWS\ktkm17.dll [2004-01-01 23:05:09 | 00,064,070 | ---- | C] () -- C:\WINDOWS\ktkm21.dll [2004-01-01 23:05:09 | 00,056,992 | ---- | C] () -- C:\WINDOWS\ktkm24.dll [2004-01-01 23:05:09 | 00,049,094 | ---- | C] () -- C:\WINDOWS\ktkm25.dll [2004-01-01 23:05:09 | 00,020,974 | ---- | C] () -- C:\WINDOWS\ktkm2.dll [2004-01-01 23:05:08 | 00,803,601 | ---- | C] () -- C:\WINDOWS\ktkm16.dll [2004-01-01 23:05:08 | 00,524,164 | ---- | C] () -- C:\WINDOWS\ktkm12.dll [2004-01-01 23:05:08 | 00,307,617 | ---- | C] () -- C:\WINDOWS\ktkm15.dll [2004-01-01 23:05:08 | 00,209,936 | ---- | C] () -- C:\WINDOWS\ktkm14.dll [2004-01-01 23:05:08 | 00,099,867 | ---- | C] () -- C:\WINDOWS\ktkm13.dll [2004-01-01 23:05:08 | 00,096,166 | ---- | C] () -- C:\WINDOWS\ktkm1.dll [2004-01-01 23:05:08 | 00,062,631 | ---- | C] () -- C:\WINDOWS\ktkm11.dll [2004-01-01 23:05:08 | 00,058,015 | ---- | C] () -- C:\WINDOWS\ktkm10.dll [2002-10-06 18:42:58 | 00,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll [2002-10-04 23:04:26 | 00,921,600 | ---- | C] () -- C:\WINDOWS\System32\VorbisEnc.dll [2002-10-04 23:04:26 | 00,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll [2002-10-04 23:04:18 | 00,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll [1999-01-22 17:46:58 | 00,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL [1998-03-26 01:12:00 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\ZLIB.DLL [color=#E56717]========== LOP Check ==========[/color] [2007-03-01 10:29:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\MetaProducts [2009-05-11 17:38:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\1157 [2009-05-11 17:15:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\2834B [2009-05-11 21:24:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\6399 [2009-05-15 19:58:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\737A [2008-09-16 15:09:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET [2009-03-25 17:44:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\InsERT [2009-02-17 15:52:15 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations [2008-04-02 11:45:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nokia [2009-07-18 12:55:22 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2007-01-05 20:42:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Drivers Headquarters [2008-03-07 23:00:15 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite [2006-11-08 19:48:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SBT [2007-06-28 20:08:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Viewpoint [2007-03-01 10:29:48 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\MetaProducts [2009-03-10 21:32:00 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\BitTorrent [2009-12-19 17:07:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\DNA [2008-09-16 15:13:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\ESET [2009-06-02 17:08:39 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\Foxit [2008-04-08 12:35:56 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\Gadu-Gadu [2008-01-22 20:06:26 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\InsERT GT [2007-01-25 17:46:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\InternetCalls [2007-03-01 10:29:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\MetaProducts [2009-09-10 18:49:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\Nokia [2009-10-03 12:13:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\Nowe Gadu-Gadu [2009-07-18 12:55:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\OpenFM [2009-12-06 17:13:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\PC Suite [2009-12-06 17:56:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\Shareaza [2009-01-07 14:22:53 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\uTorrent [2008-04-06 12:11:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ruszi\Dane aplikacji\Vso [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 16 bytes -> C:\Documents and Settings\Ruszi\Pulpit\pobrane piosenki:Shareaza.GUID @Alternate Data Stream - 16 bytes -> C:\Documents and Settings\Ruszi\Moje dokumenty\Shareaza Downloads:Shareaza.GUID < End of report >

**Posty:** 18165 · przez **wojtas** 19 Gru 2009, 18:55

1.Uruchom OTL z opcji CleanUp
2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem]
4. zrób skan Malwarebytes Anti-Malware (usuń co znajdzie ) i daj raport ze skanu
oraz tym:
http://www.programosy.pl/program,dr-web-cureit.html

Autor postu otrzymał pochwałę