Pojawiający sie bluescreen, zamulanie komputera.

[marian96xd]

Witam wszystkich bardzo serdecznie.

Nie wiem, czy temat napisałem w dobrym dziale, jeżeli nie to proszę o przeniesienie.
Chcę Wam opisać mój problem związany z PC.
Sprawa ma się następująco:
Gdzieś 3 dni temu, przy codziennym korzystaniu z komputera, z przeglądarki nic nie budziło zastrzeżeń, ale
gdy włączyłem filmik na Youtube plus jakieś tam inne strony i fora pojawił sie... BLUESCREEN!! o.O
Ja taki zonk! Nigdy wcześniej tego nie było. Zignorowałem to uzasadniając jednorazową awarią.
Komputer się zrestartował, odpaliłem Minecraft (jak pewnie wielu z Was wie ta gra bardzo pochłania zasoby komputera)
pograłem, nie wiem... ze 20,30 minut i znów bluescreen. Myślę: "coś jest nie tak"
Ale znów niewiele sobie z tego robiąc, począłem znów korzystać z kompa, odpaliłem kolejną grę, tym razem TES IV Oblivion.
Znów 20-30 min i B.S . Tym razem to juz za wiele, pomyślałem że problem nie tkwi w podzespołach, lecz w jakimś wirusie na PC.
Zeskanowałem komputer Avastem i AVG, Avast ciągle trąbił o brontoku w plikach z AppData nie pamiętam katalogu, ale to był
na 100% katalog systemowy, AVG tez to wykryło, ale w mniejszym stopniu. Usunąłem te wirusy i pomyślałem, że już wszystko OK ale znów
Blue... Nie mam już siły do tego Format, lub reinstall windowsa raczej nie wchodzi w grę bo na komputerze mam bardzo dużo ważnych plików i nie mam
gdzie tego pomieścić. Dla ścisłości wirus nazywał się dokładnie brontok-CE

Pozdrawiam!!!

[Mikou@j]

Jak już piszesz w tym dziale to wstaw logi wszystko-o-logach-aktualizacja-30-01-2012-vt117887.html
Fajnie, że BS ci wyskoczył, a jaki był kod błędu? Bez tego to wiesz, co najwyżej można sobie powróżyć. Konfiguracja komputera, razem z marką i mocą zasilacz też by się przydała.

[marian96xd]

To logi z OTL:

Kod: Zaznacz wszystko

OTL logfile created on: 6/21/2012 1:08:25 PM - Run 1
OTL by OldTimer - Version 3.2.50.0     Folder = C:\Users\Komputer\Downloads
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd

1023.30 Mb Total Physical Memory | 265.59 Mb Available Physical Memory | 25.95% Memory free
2.00 Gb Paging File | 0.64 Gb Available in Paging File | 32.03% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 17.73 Gb Total Space | 2.92 Gb Free Space | 16.48% Space Free | Partition Type: NTFS
Drive D: | 19.53 Gb Total Space | 7.49 Gb Free Space | 38.36% Space Free | Partition Type: NTFS

Computer Name: KOMPUTER-PC | User Name: Komputer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2012/06/21 12:48:01 | 000,596,992 | ---- | M] (OldTimer Tools) -- C:\Users\Komputer\Downloads\OTL.exe
PRC - [2012/06/20 19:50:06 | 000,935,480 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe
PRC - [2012/06/20 19:50:02 | 001,104,440 | ---- | M] () -- C:\Program Files\AVG Secure Search\vprot.exe
PRC - [2012/04/30 09:44:38 | 005,106,744 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgidsagent.exe
PRC - [2012/04/19 04:51:54 | 001,254,992 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgnsx.exe
PRC - [2012/04/05 05:12:34 | 002,587,008 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgtray.exe
PRC - [2012/03/19 05:18:12 | 000,979,840 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgemcx.exe
PRC - [2012/02/26 15:01:44 | 000,295,728 | ---- | M] (SweetIM Technologies Ltd.) -- C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe
PRC - [2012/02/16 14:29:02 | 000,114,992 | R--- | M] (SweetIM Technologies Ltd.) -- C:\Program Files\SweetIM\Messenger\SweetIM.exe
PRC - [2012/02/14 04:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe
PRC - [2012/02/14 04:53:14 | 000,758,112 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgrsx.exe
PRC - [2012/02/14 04:52:38 | 000,338,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgcsrvx.exe
PRC - [2011/10/15 10:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2011/10/15 10:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011/10/15 10:53:00 | 001,820,480 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
PRC - [2011/10/15 10:53:00 | 001,328,960 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
PRC - [2010/11/20 23:29:20 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010/11/20 23:29:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010/11/20 23:29:07 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
PRC - [2007/03/06 10:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2012/06/20 19:50:08 | 000,132,664 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\11.1.0\SiteSafety.dll
MOD - [2012/06/20 19:50:02 | 001,104,440 | ---- | M] () -- C:\Program Files\AVG Secure Search\vprot.exe
MOD - [2012/06/07 10:14:43 | 000,441,880 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\ppGoogleNaClPluginChrome.dll
MOD - [2012/06/07 10:14:42 | 003,922,456 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\pdf.dll
MOD - [2012/06/07 10:13:27 | 000,553,496 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\libglesv2.dll
MOD - [2012/06/07 10:13:26 | 000,117,784 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\libegl.dll
MOD - [2012/06/07 10:13:16 | 000,134,696 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\avutil-51.dll
MOD - [2012/06/07 10:13:15 | 000,250,408 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\avformat-54.dll
MOD - [2012/06/07 10:13:14 | 002,375,720 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\avcodec-54.dll
MOD - [2012/06/07 09:23:19 | 009,252,040 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\gcswf32.dll
MOD - [2012/06/07 09:23:19 | 009,252,040 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Google\Chrome\APPLIC~1\190108~1.56\gcswf32.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - [2012/06/20 19:50:06 | 000,935,480 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe -- (vToolbarUpdater11.1.0)
SRV - [2012/06/05 15:59:52 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/05/06 00:01:33 | 000,257,696 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/04/30 09:44:38 | 005,106,744 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2012\avgidsagent.exe -- (AVGIDSAgent)
SRV - [2012/03/22 23:49:23 | 004,707,968 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\System32\GameMon.des -- (npggsvc)
SRV - [2012/02/14 04:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe -- (avgwd)
SRV - [2011/12/25 09:34:29 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2011/10/15 10:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2011/10/15 10:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2009/07/14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/03/06 10:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) [Auto | Running] -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleNT.sys -- (EagleNT)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\Program Files\MediaCoder\SysInfo.sys -- (CrystalSysInfo)
DRV - [2012/04/19 04:50:26 | 000,024,896 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\avgidshx.sys -- (AVGIDSHX)
DRV - [2012/03/19 05:17:28 | 000,301,248 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2012/02/22 05:25:32 | 000,235,216 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2012/02/04 20:09:34 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2012/01/31 04:46:50 | 000,031,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avgrkx86.sys -- (Avgrkx86)
DRV - [2011/12/23 13:32:14 | 000,041,040 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\System32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2011/12/23 13:32:08 | 000,017,232 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\avgidsshimx.sys -- (AVGIDSShim)
DRV - [2011/12/23 13:32:06 | 000,024,144 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\avgidsfilterx.sys -- (AVGIDSFilter)
DRV - [2011/12/23 13:32:00 | 000,139,856 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\avgidsdriverx.sys -- (AVGIDSDriver)
DRV - [2011/10/15 10:53:00 | 010,327,360 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2010/11/20 23:29:34 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010/11/20 23:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 23:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 23:29:03 | 000,112,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - [2010/11/20 23:29:03 | 000,077,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV - [2010/11/20 23:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
DRV - [2010/11/20 23:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 23:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 23:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2010/11/20 23:29:03 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\terminpt.sys -- (terminpt)
DRV - [2010/11/20 23:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 23:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2009/07/14 01:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
DRV - [2009/07/14 00:02:53 | 000,044,032 | ---- | M] (VIA Technologies, Inc.              ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\fetnd6.sys -- (FETNDIS)
DRV - [2009/03/19 03:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2005/12/12 14:22:48 | 000,080,000 | ---- | M] (Unibrain S.A.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ubohci.sys -- (ubohci)
DRV - [2005/12/12 14:18:20 | 000,014,592 | ---- | M] (Unibrain S.A.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\UBSBM.sys -- (ubsbm)
DRV - [2005/12/12 14:18:10 | 000,037,120 | ---- | M] (Unibrain S.A.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\UBUMAPI.sys -- (ubumapi)
DRV - [2005/10/24 11:44:40 | 000,025,088 | ---- | M] (Unibrain S.A.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ubfwnet.sys -- (UBFWNet)
DRV - [2005/01/01 11:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\npptNT2.sys -- (NPPTNT2)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - SOFTWARE\Classes\CLSID\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}\InprocServer32 File not found
IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2790392
IE - HKLM\..\SearchScopes\{B50A8703-F562-4D75-9069-8205DC8AFED5}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - SOFTWARE\Classes\CLSID\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}\InprocServer32 File not found
IE - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
IE - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=807bb254-4267-11e1-a91e-0019663055af&q={searchTerms}
IE - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={78D0092D-F946-48B6-A3ED-5D449C9F5D26}&mid=6ebe35faed0247d0918cd10008b11d1b-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=pl&ds=AVG&pr=fr&d=2012-06-20 19:50:11&v=11.1.0.7&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2790392
IE - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\..\SearchScopes\{B50A8703-F562-4D75-9069-8205DC8AFED5}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local



[color=#E56717]========== FireFox ==========[/color]

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\11.1.0\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0: C:\Program Files\Ganymede\Plugins\npganymedenet.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Komputer\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Komputer\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\ [2012/06/20 19:50:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{F53C93F1-07D5-430c-86D4-C9531B27DFAF}: C:\Program Files\AVG\AVG2012\Firefox\DoNotTrack\ [2012/06/20 19:48:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\11.1.0.7\ [2012/06/20 19:50:29 | 000,000,000 | ---D | M]

[2011/12/20 21:33:56 | 000,120,984 | ---- | M] ( ) -- C:\Program Files\mozilla firefox\plugins\npganymedenet.dll
[2011/10/03 11:14:54 | 000,083,456 | ---- | M] (vShare.tv ) -- C:\Program Files\mozilla firefox\plugins\npvsharetvplg.dll

[color=#E56717]========== Chrome  ==========[/color]

CHR - default_search_provider: AVG Secure Search (Enabled)
CHR - default_search_provider: search_url = http://isearch.avg.com/search?cid={78D0092D-F946-48B6-A3ED-5D449C9F5D26}&mid=6ebe35faed0247d0918cd10008b11d1b-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=pl&ds=AVG&pr=fr&d=2012-06-20 19:50:11&v=11.1.0.7&sap=dsp&q={searchTerms}
CHR - default_search_provider: suggest_url = http://clients5.google.com/complete/search?hl={language}&q={searchTerms}&client=ie8&inputencoding={inputEncoding}&outputencoding={outputEncoding}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: Java Deployment Toolkit 6.0.300.12 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U30 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: GanymedeNet.Detector (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npganymedenet.dll
CHR - plugin: Microsoft Office 2003 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFFICE.DLL
CHR - plugin: vShare.tv plug-in (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npvsharetvplg.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: iTunes Application Detector (Enabled) = D:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - Extension: SweetIM for Facebook = C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\Copy of
CHR - Extension: SweetIM for Facebook = C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\
CHR - Extension: AVG Safe Search = C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.2161_0\
CHR - Extension: AVG Do Not Track = C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\12.0.0.2166_0\
CHR - Extension: SweetIM for Facebook = C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\Copy of
CHR - Extension: SweetIM for Facebook = C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\
CHR - Extension: AVG Safe Search = C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.2161_0\
CHR - Extension: AVG Do Not Track = C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\12.0.0.2166_0\

O1 HOSTS File: ([2009/06/10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (YouTube To ALLPlayer) - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\Program Files\ALLPlayer\YouTubeToALLPlayer.dll (ALLPlayer.org)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - No CLSID value found.
O2 - BHO: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\prxtbBitT.dll File not found
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll ()
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKLM\..\Toolbar: (no name) - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - No CLSID value found.
O3 - HKLM\..\Toolbar: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\prxtbBitT.dll File not found
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll ()
O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\..\Toolbar\WebBrowser: (no name) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - No CLSID value found.
O3 - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\..\Toolbar\WebBrowser: (BitTorrentBar Toolbar) - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - C:\Program Files\BitTorrentBar\prxtbBitT.dll File not found
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [Sweetpacks Communicator] C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [UVS11 Preload] D:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe (InterVideo Digital Technology Corporation)
O4 - HKLM..\Run: [vProt] C:\Program Files\AVG Secure Search\vprot.exe ()
O4 - HKU\S-1-5-21-344913941-3471796240-1914063461-1001..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-344913941-3471796240-1914063461-1001..\Run: [Tok-Cirrhatus]  File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-344913941-3471796240-1914063461-1003..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: Search the Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\MenuExt.html ()
O9 - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Java Plug-in 10.4.0)
O16 - DPF: {CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Java Plug-in 1.7.0_04)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Java Plug-in 1.7.0_04)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{50E6DAB6-9BEC-4369-A06E-603C8AD0FFC5}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\11.1.0\ViProtocol.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{898dd47f-4f5a-11e1-9798-0019663055af}\Shell - "" = AutoRun
O33 - MountPoints2\{898dd47f-4f5a-11e1-9798-0019663055af}\Shell\AutoRun\command - "" = F:\Setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2012/06/20 19:51:56 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\AVG2012
[2012/06/20 19:50:47 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\AVG Secure Search
[2012/06/20 19:50:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
[2012/06/20 19:50:09 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG Secure Search
[2012/06/20 19:50:02 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\AVG Secure Search
[2012/06/20 19:50:01 | 000,000,000 | ---D | C] -- C:\Program Files\AVG Secure Search
[2012/06/20 19:49:05 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2012/06/20 19:48:03 | 000,000,000 | -H-D | C] -- C:\$AVG
[2012/06/20 19:48:03 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG2012
[2012/06/20 19:48:03 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\AVG
[2012/06/20 19:47:07 | 000,000,000 | ---D | C] -- C:\Program Files\AVG
[2012/06/20 19:43:24 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData
[2012/06/20 18:47:26 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2012/06/20 18:47:26 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2012/06/20 09:00:11 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Bron.tok-16-20
[2012/06/19 16:37:46 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2012/06/19 11:19:29 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Bron.tok-16-19
[2012/06/18 13:43:41 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Bron.tok-16-18
[2012/06/17 21:08:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unibrain ubCore
[2012/06/17 21:08:54 | 000,000,000 | ---D | C] -- C:\Program Files\Unibrain
[2012/06/17 21:04:17 | 000,000,000 | ---D | C] -- C:\Users\Komputer\Desktop\WinXP_SP2
[2012/06/17 21:04:17 | 000,000,000 | ---D | C] -- C:\Users\Komputer\Desktop\Win2000_XP_2003
[2012/06/17 13:47:18 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Bron.tok-16-17
[2012/06/16 19:13:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2012/06/16 10:31:23 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Bron.tok-16-16
[2012/06/15 08:15:59 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Bron.tok-16-15
[2012/06/14 22:07:31 | 000,000,000 | ---D | C] -- C:\Users\Komputer\Documents\Ulead VideoStudio
[2012/06/14 22:07:24 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\Ulead Systems
[2012/06/14 21:42:01 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InterVideo
[2012/06/14 21:41:44 | 000,000,000 | ---D | C] -- C:\ProgramData\InterVideo
[2012/06/14 21:41:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ulead VideoStudio 11
[2012/06/14 21:40:43 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Components
[2012/06/14 21:39:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Ulead Systems
[2012/06/14 21:39:43 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Ulead Systems
[2012/06/14 21:21:54 | 000,000,000 | ---D | C] -- C:\Windows\Downloaded Installations
[2012/06/14 21:19:08 | 000,319,968 | R--- | C] (Microsoft Corporation) -- C:\Windows\difxapi.dll
[2012/06/14 21:14:59 | 000,010,112 | ---- | C] (OrangeWare Corporation) -- C:\Windows\System32\drivers\o1394b.sys
[2012/06/14 21:14:59 | 000,000,000 | ---D | C] -- C:\Windows\drivers
[2012/06/14 21:12:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2012/06/14 21:11:06 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2012/06/14 21:10:47 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2012/06/14 21:10:47 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2012/06/14 21:10:46 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2012/06/14 11:49:17 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Bron.tok-16-14
[2012/06/13 20:47:04 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Ok-SendMail-Bron-tok
[2012/06/13 20:45:15 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Loc.Mail.Bron.Tok
[2012/06/13 20:33:02 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Bron.tok-16-13
[2012/06/11 14:04:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maxis
[2012/06/11 14:02:38 | 000,304,640 | ---- | C] (InstallShield Software Corporation) -- C:\Windows\IsUn0415.exe
[2012/06/09 22:14:06 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\Toribash
[2012/06/06 16:36:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bethesda Softworks
[2012/06/06 16:35:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2012/06/06 16:34:58 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Oblivion
[2012/06/06 16:34:58 | 000,000,000 | ---D | C] -- C:\Users\Komputer\Documents\My Games
[2012/06/04 22:42:38 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2012/06/04 22:41:16 | 000,772,504 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
[2012/06/04 22:41:16 | 000,227,784 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2012/06/04 22:40:35 | 000,174,024 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2012/06/04 22:40:35 | 000,174,024 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2012/06/03 20:22:10 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\.techniclauncher
[2012/06/03 11:18:25 | 000,000,000 | -HSD | C] -- C:\found.000

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2012/06/21 13:13:02 | 000,001,040 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/06/21 13:01:17 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/06/21 13:01:08 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/06/21 12:54:20 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/06/21 12:53:42 | 804,757,504 | -HS- | M] () -- C:\hiberfil.sys
[2012/06/21 12:40:02 | 000,001,070 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-344913941-3471796240-1914063461-1001UA.job
[2012/06/21 08:18:08 | 100,594,855 | ---- | M] () -- C:\Windows\System32\drivers\AVG\incavi.avm
[2012/06/20 22:45:00 | 000,020,640 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/06/20 22:44:59 | 000,020,640 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/06/20 19:50:34 | 000,000,965 | ---- | M] () -- C:\Users\Public\Desktop\AVG 2012.lnk
[2012/06/20 18:49:22 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2012/06/20 18:49:00 | 000,012,393 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Bron.tok.A16.em.bin
[2012/06/20 18:48:17 | 000,012,393 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Update.16.Bron.Tok.bin
[2012/06/19 15:34:15 | 000,006,679 | ---- | M] () -- C:\Users\Komputer\Desktop\H01582zdj6.jpg
[2012/06/19 15:34:10 | 000,006,498 | ---- | M] () -- C:\Users\Komputer\Desktop\H01582zdj2.jpg
[2012/06/19 15:34:04 | 000,004,446 | ---- | M] () -- C:\Users\Komputer\Desktop\H01582zdj1.jpg
[2012/06/19 15:23:30 | 000,037,975 | ---- | M] () -- C:\Users\Komputer\Desktop\szkola (1)sgd.jpg
[2012/06/14 22:02:12 | 000,042,679 | ---- | M] () -- C:\Users\Komputer\Desktop\lekcja kaliska IIIb 001.jpg
[2012/06/14 22:00:25 | 000,028,171 | ---- | M] () -- C:\Users\Komputer\Desktop\szkola.jpg
[2012/06/14 21:59:31 | 000,066,186 | ---- | M] () -- C:\Users\Komputer\Desktop\5.jpg
[2012/06/14 21:41:10 | 000,001,024 | ---- | M] () -- C:\Users\Public\Desktop\Ulead VideoStudio 11.lnk
[2012/06/14 21:19:10 | 000,000,043 | ---- | M] () -- C:\Windows\System\Cm108.ini
[2012/06/14 21:12:52 | 000,000,412 | ---- | M] () -- C:\Windows\ODBC.INI
[2012/06/13 20:43:17 | 000,699,788 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2012/06/13 20:43:17 | 000,611,076 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/06/13 20:43:17 | 000,135,178 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2012/06/13 20:43:17 | 000,107,262 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/06/13 15:41:36 | 000,213,972 | ---- | M] () -- C:\Users\Komputer\Desktop\czapki2.jpg
[2012/06/12 09:46:39 | 000,002,415 | ---- | M] () -- C:\Users\Komputer\Desktop\Google Chrome.lnk
[2012/06/11 08:40:00 | 000,001,018 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-344913941-3471796240-1914063461-1001Core.job
[2012/06/09 22:13:53 | 000,000,708 | ---- | M] () -- C:\Users\Komputer\Desktop\Toribash.lnk
[2012/06/06 16:52:45 | 000,001,004 | ---- | M] () -- C:\Users\Public\Desktop\Oblivion.lnk
[2012/06/04 22:40:14 | 000,227,784 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2012/06/04 22:40:14 | 000,174,024 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2012/06/04 22:40:14 | 000,174,024 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2012/06/01 11:13:54 | 000,000,319 | ---- | M] () -- C:\Windows\game.ini
[2012/05/27 16:25:07 | 004,396,027 | ---- | M] () -- C:\Users\Komputer\Desktop\minecraft.jar

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2012/06/21 08:18:08 | 100,594,855 | ---- | C] () -- C:\Windows\System32\drivers\AVG\incavi.avm
[2012/06/20 19:50:34 | 000,000,965 | ---- | C] () -- C:\Users\Public\Desktop\AVG 2012.lnk
[2012/06/20 18:49:00 | 000,012,393 | ---- | C] () -- C:\Users\Komputer\AppData\Local\Bron.tok.A16.em.bin
[2012/06/20 18:48:17 | 000,012,393 | ---- | C] () -- C:\Users\Komputer\AppData\Local\Update.16.Bron.Tok.bin
[2012/06/19 15:34:17 | 000,006,679 | ---- | C] () -- C:\Users\Komputer\Desktop\H01582zdj6.jpg
[2012/06/19 15:34:12 | 000,006,498 | ---- | C] () -- C:\Users\Komputer\Desktop\H01582zdj2.jpg
[2012/06/19 15:34:07 | 000,004,446 | ---- | C] () -- C:\Users\Komputer\Desktop\H01582zdj1.jpg
[2012/06/19 15:23:43 | 000,037,975 | ---- | C] () -- C:\Users\Komputer\Desktop\szkola (1)sgd.jpg
[2012/06/14 22:49:44 | 002,230,097 | ---- | C] () -- C:\Users\Komputer\Desktop\MLB Snapback.jpg
[2012/06/14 22:49:44 | 001,055,423 | ---- | C] () -- C:\Users\Komputer\Desktop\New York Yankees.jpg
[2012/06/14 22:49:44 | 000,433,833 | ---- | C] () -- C:\Users\Komputer\Desktop\Atlanta Braves.jpg
[2012/06/14 22:49:44 | 000,315,979 | ---- | C] () -- C:\Users\Komputer\Desktop\Okaland Athletics.jpg
[2012/06/14 22:49:44 | 000,309,830 | ---- | C] () -- C:\Users\Komputer\Desktop\Boston Red Sox.jpg
[2012/06/14 22:49:44 | 000,258,267 | ---- | C] () -- C:\Users\Komputer\Desktop\Pittsburgh Pirates.jpg
[2012/06/14 22:49:44 | 000,228,042 | ---- | C] () -- C:\Users\Komputer\Desktop\Los Angeles Dodgers.jpg
[2012/06/14 22:49:44 | 000,201,582 | ---- | C] () -- C:\Users\Komputer\Desktop\Philadelphia Phillies.jpg
[2012/06/14 22:49:44 | 000,068,225 | ---- | C] () -- C:\Users\Komputer\Desktop\New York Mets.jpg
[2012/06/14 22:02:16 | 000,042,679 | ---- | C] () -- C:\Users\Komputer\Desktop\lekcja kaliska IIIb 001.jpg
[2012/06/14 22:00:25 | 000,028,171 | ---- | C] () -- C:\Users\Komputer\Desktop\szkola.jpg
[2012/06/14 21:59:35 | 000,066,186 | ---- | C] () -- C:\Users\Komputer\Desktop\5.jpg
[2012/06/14 21:41:42 | 000,210,456 | ---- | C] () -- C:\Windows\System32\IVIresizeW7.dll
[2012/06/14 21:41:42 | 000,206,360 | ---- | C] () -- C:\Windows\System32\IVIresizeA6.dll
[2012/06/14 21:41:42 | 000,198,168 | ---- | C] () -- C:\Windows\System32\IVIresizeP6.dll
[2012/06/14 21:41:42 | 000,198,168 | ---- | C] () -- C:\Windows\System32\IVIresizeM6.dll
[2012/06/14 21:41:42 | 000,194,072 | ---- | C] () -- C:\Windows\System32\IVIresizePX.dll
[2012/06/14 21:41:42 | 000,026,136 | ---- | C] () -- C:\Windows\System32\IVIresize.dll
[2012/06/14 21:41:10 | 000,001,024 | ---- | C] () -- C:\Users\Public\Desktop\Ulead VideoStudio 11.lnk
[2012/06/14 21:19:10 | 000,065,536 | R--- | C] () -- C:\Windows\System32\CmiInstallResAll.dll
[2012/06/14 21:19:10 | 000,000,043 | ---- | C] () -- C:\Windows\System\Cm108.ini
[2012/06/14 21:19:08 | 000,000,707 | R--- | C] () -- C:\Windows\cm108.ini
[2012/06/13 15:40:22 | 000,213,972 | ---- | C] () -- C:\Users\Komputer\Desktop\czapki2.jpg
[2012/06/09 22:13:53 | 000,000,708 | ---- | C] () -- C:\Users\Komputer\Desktop\Toribash.lnk
[2012/06/06 16:52:45 | 000,001,004 | ---- | C] () -- C:\Users\Public\Desktop\Oblivion.lnk
[2012/06/01 11:13:53 | 000,000,319 | ---- | C] () -- C:\Windows\game.ini
[2012/05/29 20:03:00 | 004,396,027 | ---- | C] () -- C:\Users\Komputer\Desktop\minecraft.jar
[2012/05/24 17:34:20 | 001,058,316 | ---- | C] (                                                                                                    ) -- C:\Users\Komputer\Desktop\Minecraft Version Changer.exe
[2012/04/22 22:12:22 | 004,424,704 | ---- | C] () -- C:\Windows\System32\ffmpeg.dll
[2012/04/21 14:25:17 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat
[2012/04/12 19:56:37 | 000,017,408 | ---- | C] () -- C:\Users\Komputer\AppData\Local\WebpageIcons.db
[2012/04/09 01:40:36 | 000,079,360 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2012/04/09 01:39:46 | 000,260,608 | ---- | C] () -- C:\Windows\System32\TomsMoComp_ff.dll
[2012/04/09 01:39:32 | 000,158,720 | ---- | C] () -- C:\Windows\System32\ff_unrar.dll
[2012/04/09 01:39:32 | 000,099,840 | ---- | C] () -- C:\Windows\System32\ff_wmv9.dll
[2012/04/09 01:39:30 | 001,525,248 | ---- | C] () -- C:\Windows\System32\ff_samplerate.dll
[2012/04/09 01:39:30 | 000,146,944 | ---- | C] () -- C:\Windows\System32\ff_libmad.dll
[2012/04/09 01:39:28 | 000,212,480 | ---- | C] () -- C:\Windows\System32\ff_libdts.dll
[2012/04/09 01:39:28 | 000,115,200 | ---- | C] () -- C:\Windows\System32\ff_liba52.dll
[2012/04/09 01:39:26 | 000,328,704 | ---- | C] () -- C:\Windows\System32\ff_libfaad2.dll
[2012/04/04 15:59:08 | 000,182,272 | ---- | C] () -- C:\Windows\patchw32.dll
[2012/03/29 16:21:26 | 000,172,032 | ---- | C] () -- C:\Windows\System32\libbluray.dll
[2012/03/29 16:21:18 | 006,582,226 | ---- | C] () -- C:\Windows\System32\avcodec-lav-54.dll
[2012/03/29 16:21:18 | 001,152,365 | ---- | C] () -- C:\Windows\System32\avformat-lav-54.dll
[2012/03/29 16:21:18 | 000,374,152 | ---- | C] () -- C:\Windows\System32\swscale-lav-2.dll
[2012/03/29 16:21:18 | 000,207,872 | ---- | C] () -- C:\Windows\System32\avutil-lav-51.dll
[2012/03/29 16:21:18 | 000,144,523 | ---- | C] () -- C:\Windows\System32\avfilter-lav-2.dll
[2012/02/01 03:16:20 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI
[2011/12/25 23:11:55 | 000,699,788 | ---- | C] () -- C:\Windows\System32\perfh015.dat
[2011/12/25 23:11:55 | 000,337,158 | ---- | C] () -- C:\Windows\System32\perfi015.dat
[2011/12/25 23:11:55 | 000,135,178 | ---- | C] () -- C:\Windows\System32\perfc015.dat
[2011/12/25 23:11:55 | 000,038,710 | ---- | C] () -- C:\Windows\System32\perfd015.dat
[2011/12/07 21:32:24 | 000,216,064 | ---- | C] ( ) -- C:\Windows\System32\Lagarith.dll
[2011/10/15 10:54:52 | 000,321,856 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe
[2011/09/08 16:00:52 | 000,150,528 | ---- | C] () -- C:\Windows\System32\mkx.dll
[2011/09/08 16:00:48 | 000,142,336 | ---- | C] () -- C:\Windows\System32\mp4.dll
[2011/09/08 16:00:42 | 000,123,392 | ---- | C] () -- C:\Windows\System32\ogm.dll
[2011/09/08 16:00:38 | 000,249,856 | ---- | C] () -- C:\Windows\System32\dxr.dll
[2011/09/08 16:00:34 | 000,113,152 | ---- | C] () -- C:\Windows\System32\dsmux.exe
[2011/09/08 16:00:24 | 000,154,624 | ---- | C] () -- C:\Windows\System32\ts.dll
[2011/09/08 16:00:10 | 000,137,728 | ---- | C] () -- C:\Windows\System32\mkv2vfr.exe
[2011/09/08 16:00:06 | 000,358,400 | ---- | C] () -- C:\Windows\System32\gdsmux.exe
[2011/09/08 15:59:54 | 000,080,384 | ---- | C] () -- C:\Windows\System32\mkzlib.dll
[2011/09/08 15:59:52 | 000,024,576 | ---- | C] () -- C:\Windows\System32\mkunicode.dll
[2011/05/30 15:42:50 | 000,240,640 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2011/03/03 13:39:56 | 000,109,568 | ---- | C] () -- C:\Windows\System32\avi.dll
[2011/03/03 13:38:10 | 000,097,792 | ---- | C] () -- C:\Windows\System32\avs.dll
[2011/03/03 13:37:50 | 000,093,184 | ---- | C] () -- C:\Windows\System32\avss.dll
[2010/11/20 23:29:34 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2010/11/20 23:29:26 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2010/08/18 21:56:38 | 000,000,151 | ---- | C] () -- C:\Windows\System32\Registration.ini

[color=#E56717]========== LOP Check ==========[/color]

[2012/06/21 08:21:50 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\.minecraft
[2012/06/03 20:22:50 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\.techniclauncher
[2012/05/07 22:41:43 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\AnvSoft
[2012/06/20 19:51:56 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\AVG2012
[2012/05/07 22:33:33 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\avidemux
[2012/04/29 22:29:01 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\BitTorrent
[2012/06/04 19:13:00 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\Broad Intelligence
[2012/06/13 20:41:18 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\DAEMON Tools Lite
[2012/04/14 20:01:26 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\FileZilla
[2012/02/06 20:35:49 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\GanymedeNet
[2012/03/15 01:37:37 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\gtk-2.0
[2012/06/13 20:42:42 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\Kingston
[2012/02/13 17:12:23 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\LolClient
[2012/04/24 15:13:02 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\Notepad++
[2012/03/28 05:54:09 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\Publish Providers
[2012/02/01 06:53:19 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\pymclevel
[2012/03/28 05:53:47 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\Sony
[2012/02/05 20:01:03 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\SystemRequirementsLab
[2012/05/07 23:13:27 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\systweak
[2012/04/25 20:17:22 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\TS3Client
[2012/06/14 22:11:30 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\Ulead Systems
[2012/06/19 17:40:57 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\uTorrent
[2012/05/07 22:57:08 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\WinAVI
[2012/06/08 14:45:37 | 000,032,620 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:05EE1EEF

< End of report >


Kod: Zaznacz wszystko

OTL Extras logfile created on: 6/21/2012 1:08:25 PM - Run 1
OTL by OldTimer - Version 3.2.50.0     Folder = C:\Users\Komputer\Downloads
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd

1023.30 Mb Total Physical Memory | 265.59 Mb Available Physical Memory | 25.95% Memory free
2.00 Gb Paging File | 0.64 Gb Available in Paging File | 32.03% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 17.73 Gb Total Space | 2.92 Gb Free Space | 16.48% Space Free | Partition Type: NTFS
Drive D: | 19.53 Gb Total Space | 7.49 Gb Free Space | 38.36% Space Free | Partition Type: NTFS

Computer Name: KOMPUTER-PC | User Name: Komputer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[color=#E56717]========== Shell Spawning ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[color=#E56717]========== Security Center Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[color=#E56717]========== Firewall Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 1

[color=#E56717]========== Authorized Applications List ==========[/color]


[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0CCDCEC7-2CBD-40A8-A782-015873C4D9CC}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{0D11AF30-405C-4F12-A42C-566C129AA6D8}" = rport=138 | protocol=17 | dir=out | app=system |
"{0D74C327-12FC-4629-8F99-756E2A62FE7F}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{1BFC812F-431D-4910-8E5A-21FB7DCCCBD4}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{1E7D9D0A-653C-49CE-99DB-59A3C5BCC3F6}" = lport=139 | protocol=6 | dir=in | app=system |
"{2943CFEB-4361-450D-8B97-68B864A898DB}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{3685C3B7-2403-44D1-BCFC-4749EC54A040}" = rport=137 | protocol=17 | dir=out | app=system |
"{3B4C5E40-CF53-4AC5-919F-A0E732A802FF}" = lport=138 | protocol=17 | dir=in | app=system |
"{3C9DBD17-5290-45A0-B05F-62689E82B1F7}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{553DA561-AC83-48EB-97D4-135A3A67868A}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{60C579EA-AB7A-419C-8DCD-8328F07E53C2}" = rport=10243 | protocol=6 | dir=out | app=system |
"{81FA81F9-233E-40B2-99F9-07A9F893B51E}" = rport=139 | protocol=6 | dir=out | app=system |
"{AA50F1F2-F47D-4794-8F1E-E1BF3DD493A0}" = lport=2869 | protocol=6 | dir=in | app=system |
"{BE639922-4B76-45CD-B58C-899EEC9B04E4}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{C596FA5E-7FEC-413A-9F01-7AAE3368039B}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{CC708FE8-529A-4894-8C40-65B27F712D9D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{E210AD24-7FB5-4B72-8520-B0CDC1087E28}" = lport=10243 | protocol=6 | dir=in | app=system |
"{EB0C9A25-1B29-419E-B5F1-E53F2E126933}" = lport=445 | protocol=6 | dir=in | app=system |
"{EE9301F2-C73E-49FA-A290-2F60A4EF343C}" = rport=445 | protocol=6 | dir=out | app=system |
"{F5FB03DE-33FB-4266-A1A7-2ED00D6CB68E}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{F83492B8-2416-4F41-AABB-822AA65D9685}" = lport=137 | protocol=17 | dir=in | app=system |

[color=#E56717]========== Vista Active Application Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0A9F8BBD-E784-4B8C-979E-C0891E214C43}" = protocol=17 | dir=in | app=c:\windows\system32\msiexec.exe |
"{0F3351FE-B9BF-4242-A7A5-B60CF131E56B}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{1B2245E0-FD88-42D7-9F87-F05DF811620A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{1C50C650-DBF6-462F-B4EE-0555DBACEEC7}" = protocol=6 | dir=out | app=system |
"{235D0D0B-2AAE-4137-BDF2-D30CDB51D8AE}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgmfapx.exe |
"{2CC8E1E0-CBCD-4292-A57A-87F34587F271}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgemcx.exe |
"{2F3F4F83-2DB0-4FD8-9AB4-5EEC080CBF78}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{2FCC94DD-6BA2-4F2A-A456-2C6E41302808}" = protocol=6 | dir=in | app=c:\program files\sweetim\communicator\sweetpacksupdatemanager.exe |
"{38C57754-C316-48E9-91A7-9AED266EC284}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{3E22C522-C1C5-4B76-8C31-530BD97526E4}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{3EFA590A-EE63-46ED-8516-66D99AE4A2EE}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{42374C91-4FCB-4DB0-8DE5-FBAC7CAF34CD}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{42C4306B-EDB7-4FCD-9BAA-A1237BFBCB2F}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{459C3694-0FAC-4DDD-9B87-C1A245FFD218}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{4CC6F99F-1699-45AE-AA10-45E1B39EE795}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgnsx.exe |
"{510B10AF-AF1A-46F1-B13F-1A0855265D2B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{569F660B-BA8A-4D86-8BF2-26664A3F5710}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{620BE19E-223A-4A39-AE80-3384976F310E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{659CAA0F-3638-4CBE-8405-4F78FC9E56C6}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgdiagex.exe |
"{6D9576C2-92CB-41F0-B17A-90C03A330659}" = protocol=6 | dir=in | app=c:\windows\system32\msiexec.exe |
"{6DE8EA9D-23BB-4D71-872E-CEA7C88AC11D}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{8257E859-1C44-46EC-93C0-4836691E3235}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{86706EC3-01BC-42C5-A598-D515AED2CCAC}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgmfapx.exe |
"{86F50F29-D5B9-4C9D-8B69-634C97BD699B}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{8B889BA5-9994-4EFE-8185-BC604CA60405}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{94E3B828-868A-4016-BFF7-4D48E746BA27}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgdiagex.exe |
"{9E4B08D1-7EF5-4C06-BC75-C1C6116AE902}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgemcx.exe |
"{B71C14CB-AA84-434F-9E4C-CF746F0BD119}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{BF2F747B-9AF8-498F-B878-5064879B065A}" = protocol=17 | dir=in | app=c:\program files\sweetim\communicator\sweetpacksupdatemanager.exe |
"{C9D2964D-7FAC-4888-821A-C7B9F15C5101}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{CF30B127-C30F-440F-B538-83AD57904AF3}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgnsx.exe |
"{D6954488-4F70-42D4-B942-D095B3544430}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{DF6AE32F-2646-4D0D-B946-A5851F47DF81}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |

[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0965F857-DAAD-4F93-8054-0E2EC3C8C5B0}" = SweetIM for Messenger 3.6
"{1111706F-666A-4037-7777-210328764D10}" = JavaFX 2.1.0
"{147894EE-5ED4-11E1-A8FF-F04DA23A5C58}" = MSVCRT Redists
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83217004FF}" = Java(TM) 7 Update 4
"{35CB6715-41F8-4F99-8881-6FC75BF054B0}" = Oblivion
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{521AAD14-5030-44BB-8B0E-5CE65FCE57E0}" = InterVideo DeviceService
"{5B58EF61-85F2-4977-97A5-84C19F926579}" = SweetPacks Toolbar for Internet Explorer 4.5
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{6D12EC75-E7D3-4EAD-AB10-E1F3AFF94AA6}" = AVG 2012
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7F6D7FD9-648D-4DD9-BB6E-3990C675ECA4}" = NVIDIA PhysX
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{943A8D28-80D6-41DC-AE94-81FEB42041BF}" = System Requirements Lab CYRI
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Sterownik 3D Vision 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA Sterownik kontrolera 3D Vision 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.11.0621
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 1.5.20
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{C6A09671-93A6-4548-9FAE-3BF21EB9C921}" = AVG 2012
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.9
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F65FE148-FCF5-42F7-8803-FA0B7DA8B8A4}" = ubCore
"{F99F9E24-EE2F-47FD-AEB0-FDB82859B5C9}" = VideoStudio
"{FB697452-8CA4-46B4-98B1-165C922A2EF3}" = Update Manager for SweetPacks 1.0
"{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"AVG" = AVG 2012
"CCleaner" = CCleaner
"DAEMON Tools Lite" = DAEMON Tools Lite
"InstallShield_{F65FE148-FCF5-42F7-8803-FA0B7DA8B8A4}" = ubCore
"InstallShield_{F99F9E24-EE2F-47FD-AEB0-FDB82859B5C9}" = Ulead VideoStudio 11
"Notepad++" = Notepad++
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"The Sims" = The Sims
"uTorrent" = µTorrent
"Windows 7 - Codec Pack" = Windows 7 Codec Pack 4.0.3
"WinRAR archiver" = WinRAR 4.01 (32-bitowy)

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-21-344913941-3471796240-1914063461-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

[color=#E56717]========== Last 20 Event Log Errors ==========[/color]

[ Application Events ]
Error - 6/20/2012 1:47:26 PM | Computer Name = Komputer-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez
Usługi kryptograficzne nie powiodło się.  Details: AddLegacyDriverFiles: Unable to
back up image of binary aswMonFlt.  System Error: The system cannot find the file
specified.  .

Error - 6/20/2012 1:47:26 PM | Computer Name = Komputer-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez
Usługi kryptograficzne nie powiodło się.  Details: AddLegacyDriverFiles: Unable to
back up image of binary aswRdr.  System Error: The system cannot find the file specified.
.

Error - 6/20/2012 1:47:26 PM | Computer Name = Komputer-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez
Usługi kryptograficzne nie powiodło się.  Details: AddLegacyDriverFiles: Unable to
back up image of binary aswSnx.  System Error: The system cannot find the file specified.
.

Error - 6/20/2012 1:47:26 PM | Computer Name = Komputer-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez
Usługi kryptograficzne nie powiodło się.  Details: AddLegacyDriverFiles: Unable to
back up image of binary aswSP.  System Error: The system cannot find the file specified.
.

Error - 6/20/2012 1:47:26 PM | Computer Name = Komputer-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez
Usługi kryptograficzne nie powiodło się.  Details: AddLegacyDriverFiles: Unable to
back up image of binary avast! Network Shield Support.  System Error: The system cannot
find the file specified.  .

Error - 6/20/2012 1:47:26 PM | Computer Name = Komputer-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez
Usługi kryptograficzne nie powiodło się.  Details: AddWin32ServiceFiles: Unable to
back up image of service avast! Antivirus since QueryServiceConfig API failed  System
Error: The system cannot find the file specified.  .

Error - 6/20/2012 1:52:40 PM | Computer Name = Komputer-PC | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: sidebar.exe, wersja: 6.1.7601.17514,
sygnatura czasowa: 0x4ce79791  Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0,
sygnatura czasowa: 0x00000000  Kod wyjątku: 0xc0000005  Przesunięcie błędu: 0x03400b2d
Identyfikator
procesu powodującego błąd: 0xd88  Godzina uruchomienia aplikacji powodującej błąd:
0x01cd4f094f2f446c  Ścieżka aplikacji powodującej błąd: C:\Program Files\Windows
Sidebar\sidebar.exe  Ścieżka modułu powodującego błąd: unknown  Identyfikator raportu:
b9efed83-bb00-11e1-b236-00494e55f4e8

Error - 6/21/2012 1:58:29 AM | Computer Name = Komputer-PC | Source = WinMgmt | ID = 10
Description =

Error - 6/21/2012 6:23:42 AM | Computer Name = Komputer-PC | Source = WinMgmt | ID = 10
Description =

Error - 6/21/2012 6:55:04 AM | Computer Name = Komputer-PC | Source = WinMgmt | ID = 10
Description =

[ System Events ]
Error - 4/2/2012 1:56:58 AM | Computer Name = Komputer-PC | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description = Niektóre funkcje zarządzania energią procesora w czasie wydajności
zostały wyłączone z powodu znanego problemu z oprogramowaniem układowym. Skontaktuj
się z producentem komputera w celu uzyskania aktualizacji oprogramowania układowego.

Error - 4/2/2012 7:51:31 AM | Computer Name = Komputer-PC | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description = Niektóre funkcje zarządzania energią procesora w czasie wydajności
zostały wyłączone z powodu znanego problemu z oprogramowaniem układowym. Skontaktuj
się z producentem komputera w celu uzyskania aktualizacji oprogramowania układowego.

Error - 4/2/2012 1:57:01 PM | Computer Name = Komputer-PC | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 08:01:31 na ?2012-?04-?02 było
nieoczekiwane.

Error - 4/2/2012 1:56:33 PM | Computer Name = Komputer-PC | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description = Niektóre funkcje zarządzania energią procesora w czasie wydajności
zostały wyłączone z powodu znanego problemu z oprogramowaniem układowym. Skontaktuj
się z producentem komputera w celu uzyskania aktualizacji oprogramowania układowego.

Error - 4/3/2012 3:53:40 AM | Computer Name = Komputer-PC | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description = Niektóre funkcje zarządzania energią procesora w czasie wydajności
zostały wyłączone z powodu znanego problemu z oprogramowaniem układowym. Skontaktuj
się z producentem komputera w celu uzyskania aktualizacji oprogramowania układowego.

Error - 4/3/2012 5:43:57 AM | Computer Name = Komputer-PC | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description = Niektóre funkcje zarządzania energią procesora w czasie wydajności
zostały wyłączone z powodu znanego problemu z oprogramowaniem układowym. Skontaktuj
się z producentem komputera w celu uzyskania aktualizacji oprogramowania układowego.

Error - 4/3/2012 7:22:15 AM | Computer Name = Komputer-PC | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description = Niektóre funkcje zarządzania energią procesora w czasie wydajności
zostały wyłączone z powodu znanego problemu z oprogramowaniem układowym. Skontaktuj
się z producentem komputera w celu uzyskania aktualizacji oprogramowania układowego.

Error - 4/3/2012 10:52:03 AM | Computer Name = Komputer-PC | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 07:50:15 na ?2012-?04-?03 było
nieoczekiwane.

Error - 4/3/2012 10:51:54 AM | Computer Name = Komputer-PC | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description = Niektóre funkcje zarządzania energią procesora w czasie wydajności
zostały wyłączone z powodu znanego problemu z oprogramowaniem układowym. Skontaktuj
się z producentem komputera w celu uzyskania aktualizacji oprogramowania układowego.

Error - 4/3/2012 1:11:31 PM | Computer Name = Komputer-PC | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description = Niektóre funkcje zarządzania energią procesora w czasie wydajności
zostały wyłączone z powodu znanego problemu z oprogramowaniem układowym. Skontaktuj
się z producentem komputera w celu uzyskania aktualizacji oprogramowania układowego.


< End of report >


Konfiguracja: Win 7 Ultimate SP1
Intel Pentium Dual CPU E2140 @ 1.60 GHz 1.61 GHz
Ram: 1GB
32- bit system operacyjny
NVidia 9600 GSO 3845 MB

Zaraz sprawdze zasilacz za bardzo nie mogę teraz.

A i jeszcze kod błędu ( nie wiem czy to jest to)
Wyniki tej operacji były następujące: 0x000000d1 (0x3ce83438, 0x00000002, 0x00000000, 0x92bc2ced). Zrzut zapisano w: C:\Windows\MEMORY.DMP. Identyfikator raportu: 062112-43656-01.

[wojtas]

odinstaluj :
SweetPacks Toolbar for Internet Explorer 4.5

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2790392
IE - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - SOFTWARE\Classes\CLSID\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}\InprocServer32 File not found
IE - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
IE - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\..\SearchScopes\{0633EE93-D776-472f-
IE - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2790392
O2 - BHO: (no name) - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - No CLSID value found.
O2 - BHO: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\prxtbBitT.dll File not found
O3 - HKLM\..\Toolbar: (no name) - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - No CLSID value found.
O3 - HKLM\..\Toolbar: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\prxtbBitT.dll File not found
O3 - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\..\Toolbar\WebBrowser: (no name) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - No CLSID value found.
O3 - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\..\Toolbar\WebBrowser: (BitTorrentBar Toolbar) - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - C:\Program Files\BitTorrentBar\prxtbBitT.dll File not found
O4 - HKU\S-1-5-21-344913941-3471796240-1914063461-1001..\Run: [Tok-Cirrhatus] File not found
[2012/06/20 09:00:11 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Bron.tok-16-20
[2012/06/19 11:19:29 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Bron.tok-16-19
[2012/06/18 13:43:41 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Bron.tok-16-18
[2012/06/17 13:47:18 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Bron.tok-16-17
[2012/06/16 10:31:23 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Bron.tok-16-16
[2012/06/15 08:15:59 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Bron.tok-16-15
[2012/06/14 11:49:17 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Bron.tok-16-14
[2012/06/13 20:47:04 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Ok-SendMail-Bron-tok
[2012/06/13 20:45:15 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Loc.Mail.Bron.Tok
[2012/06/13 20:33:02 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Bron.tok-16-13
[2012/06/20 18:49:00 | 000,012,393 | ---- | C] () -- C:\Users\Komputer\AppData\Local\Bron.tok.A16.em.bin
[2012/06/20 18:48:17 | 000,012,393 | ---- | C] () -- C:\Users\Komputer\AppData\Local\Update.16.Bron.Tok.bin
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:05EE1EEF

:Commands
[emptytemp]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

Następnie uruchamiasz OTL z opcją skanuj. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia (zawartość notatnika, która otworzy się po restarcie).

[marian96xd]

@wojtas
odinstalowałem to jak kazałeś a oto logi z OTl'a:

Kod: Zaznacz wszystko

OTL logfile created on: 6/22/2012 8:32:18 PM - Run 2
OTL by OldTimer - Version 3.2.50.0     Folder = C:\Users\Komputer\Downloads
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd

1023.30 Mb Total Physical Memory | 266.66 Mb Available Physical Memory | 26.06% Memory free
2.00 Gb Paging File | 0.91 Gb Available in Paging File | 45.44% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 17.73 Gb Total Space | 2.68 Gb Free Space | 15.11% Space Free | Partition Type: NTFS
Drive D: | 19.53 Gb Total Space | 7.49 Gb Free Space | 38.36% Space Free | Partition Type: NTFS

Computer Name: KOMPUTER-PC | User Name: Komputer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2012/06/21 12:48:01 | 000,596,992 | ---- | M] (OldTimer Tools) -- C:\Users\Komputer\Downloads\OTL.exe
PRC - [2012/06/20 19:50:06 | 000,935,480 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe
PRC - [2012/06/20 19:50:02 | 001,104,440 | ---- | M] () -- C:\Program Files\AVG Secure Search\vprot.exe
PRC - [2012/04/30 09:44:38 | 005,106,744 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgidsagent.exe
PRC - [2012/04/19 04:51:54 | 001,254,992 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgnsx.exe
PRC - [2012/04/05 05:12:34 | 002,587,008 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgtray.exe
PRC - [2012/03/19 05:18:12 | 000,979,840 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgemcx.exe
PRC - [2012/02/26 15:01:44 | 000,295,728 | ---- | M] (SweetIM Technologies Ltd.) -- C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe
PRC - [2012/02/16 14:29:02 | 000,114,992 | R--- | M] (SweetIM Technologies Ltd.) -- C:\Program Files\SweetIM\Messenger\SweetIM.exe
PRC - [2012/02/14 04:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe
PRC - [2012/02/14 04:53:14 | 000,758,112 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgrsx.exe
PRC - [2012/02/14 04:52:38 | 000,338,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgcsrvx.exe
PRC - [2011/10/15 10:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2011/10/15 10:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011/10/15 10:53:00 | 001,820,480 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
PRC - [2011/10/15 10:53:00 | 001,328,960 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
PRC - [2010/11/20 23:29:20 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010/11/20 23:29:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010/11/20 23:29:10 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prevhost.exe
PRC - [2010/11/20 23:29:07 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
PRC - [2007/03/06 10:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2012/06/20 19:50:08 | 000,132,664 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\11.1.0\SiteSafety.dll
MOD - [2012/06/20 19:50:02 | 001,104,440 | ---- | M] () -- C:\Program Files\AVG Secure Search\vprot.exe
MOD - [2012/06/07 10:14:43 | 000,441,880 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\ppGoogleNaClPluginChrome.dll
MOD - [2012/06/07 10:14:42 | 003,922,456 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\pdf.dll
MOD - [2012/06/07 10:13:27 | 000,553,496 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\libglesv2.dll
MOD - [2012/06/07 10:13:26 | 000,117,784 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\libegl.dll
MOD - [2012/06/07 10:13:16 | 000,134,696 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\avutil-51.dll
MOD - [2012/06/07 10:13:15 | 000,250,408 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\avformat-54.dll
MOD - [2012/06/07 10:13:14 | 002,375,720 | ---- | M] () -- C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\avcodec-54.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - [2012/06/20 19:50:06 | 000,935,480 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe -- (vToolbarUpdater11.1.0)
SRV - [2012/06/05 15:59:52 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/05/06 00:01:33 | 000,257,696 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/04/30 09:44:38 | 005,106,744 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2012\avgidsagent.exe -- (AVGIDSAgent)
SRV - [2012/03/22 23:49:23 | 004,707,968 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\System32\GameMon.des -- (npggsvc)
SRV - [2012/02/14 04:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe -- (avgwd)
SRV - [2011/12/25 09:34:29 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2011/10/15 10:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2011/10/15 10:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2009/07/14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/03/06 10:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) [Auto | Running] -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleNT.sys -- (EagleNT)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\Program Files\MediaCoder\SysInfo.sys -- (CrystalSysInfo)
DRV - [2012/04/19 04:50:26 | 000,024,896 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\avgidshx.sys -- (AVGIDSHX)
DRV - [2012/03/19 05:17:28 | 000,301,248 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2012/02/22 05:25:32 | 000,235,216 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2012/02/04 20:09:34 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2012/01/31 04:46:50 | 000,031,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avgrkx86.sys -- (Avgrkx86)
DRV - [2011/12/23 13:32:14 | 000,041,040 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\System32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2011/12/23 13:32:08 | 000,017,232 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\avgidsshimx.sys -- (AVGIDSShim)
DRV - [2011/12/23 13:32:06 | 000,024,144 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\avgidsfilterx.sys -- (AVGIDSFilter)
DRV - [2011/12/23 13:32:00 | 000,139,856 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\avgidsdriverx.sys -- (AVGIDSDriver)
DRV - [2011/10/15 10:53:00 | 010,327,360 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2010/11/20 23:29:34 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010/11/20 23:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 23:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 23:29:03 | 000,112,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - [2010/11/20 23:29:03 | 000,077,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV - [2010/11/20 23:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
DRV - [2010/11/20 23:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 23:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 23:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2010/11/20 23:29:03 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\terminpt.sys -- (terminpt)
DRV - [2010/11/20 23:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 23:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2009/07/14 01:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
DRV - [2009/07/14 00:02:53 | 000,044,032 | ---- | M] (VIA Technologies, Inc.              ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\fetnd6.sys -- (FETNDIS)
DRV - [2009/03/19 03:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2005/12/12 14:22:48 | 000,080,000 | ---- | M] (Unibrain S.A.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ubohci.sys -- (ubohci)
DRV - [2005/12/12 14:18:20 | 000,014,592 | ---- | M] (Unibrain S.A.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\UBSBM.sys -- (ubsbm)
DRV - [2005/12/12 14:18:10 | 000,037,120 | ---- | M] (Unibrain S.A.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\UBUMAPI.sys -- (ubumapi)
DRV - [2005/10/24 11:44:40 | 000,025,088 | ---- | M] (Unibrain S.A.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ubfwnet.sys -- (UBFWNet)
DRV - [2005/01/01 11:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\npptNT2.sys -- (NPPTNT2)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - No CLSID value found
IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKLM\..\SearchScopes\{B50A8703-F562-4D75-9069-8205DC8AFED5}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\..\SearchScopes,DefaultScope = {B50A8703-F562-4D75-9069-8205DC8AFED5}
IE - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\..\SearchScopes\{B50A8703-F562-4D75-9069-8205DC8AFED5}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-344913941-3471796240-1914063461-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



[color=#E56717]========== FireFox ==========[/color]

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\11.1.0\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0: C:\Program Files\Ganymede\Plugins\npganymedenet.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Komputer\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Komputer\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\ [2012/06/20 19:50:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{F53C93F1-07D5-430c-86D4-C9531B27DFAF}: C:\Program Files\AVG\AVG2012\Firefox\DoNotTrack\ [2012/06/20 19:48:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\11.1.0.7\ [2012/06/20 19:50:29 | 000,000,000 | ---D | M]

[2011/12/20 21:33:56 | 000,120,984 | ---- | M] ( ) -- C:\Program Files\mozilla firefox\plugins\npganymedenet.dll
[2011/10/03 11:14:54 | 000,083,456 | ---- | M] (vShare.tv ) -- C:\Program Files\mozilla firefox\plugins\npvsharetvplg.dll

[color=#E56717]========== Chrome  ==========[/color]

CHR - default_search_provider: AVG Secure Search (Enabled)
CHR - default_search_provider: search_url = http://isearch.avg.com/search?cid={78D0092D-F946-48B6-A3ED-5D449C9F5D26}&mid=6ebe35faed0247d0918cd10008b11d1b-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=pl&ds=AVG&pr=fr&d=2012-06-20 19:50:11&v=11.1.0.7&sap=dsp&q={searchTerms}
CHR - default_search_provider: suggest_url = http://clients5.google.com/complete/search?hl={language}&q={searchTerms}&client=ie8&inputencoding={inputEncoding}&outputencoding={outputEncoding}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Komputer\AppData\Local\Google\Chrome\Application\19.0.1084.56\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: Java Deployment Toolkit 6.0.300.12 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U30 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: GanymedeNet.Detector (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npganymedenet.dll
CHR - plugin: Microsoft Office 2003 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFFICE.DLL
CHR - plugin: vShare.tv plug-in (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npvsharetvplg.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: iTunes Application Detector (Enabled) = D:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - Extension: SweetIM for Facebook = C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\Copy of
CHR - Extension: SweetIM for Facebook = C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\
CHR - Extension: AVG Safe Search = C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.2161_0\
CHR - Extension: AVG Do Not Track = C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\12.0.0.2166_0\
CHR - Extension: SweetIM for Facebook = C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\Copy of
CHR - Extension: SweetIM for Facebook = C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\
CHR - Extension: AVG Safe Search = C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.2161_0\
CHR - Extension: AVG Do Not Track = C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\12.0.0.2166_0\

O1 HOSTS File: ([2009/06/10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (YouTube To ALLPlayer) - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\Program Files\ALLPlayer\YouTubeToALLPlayer.dll (ALLPlayer.org)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll ()
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll ()
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [Sweetpacks Communicator] C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [UVS11 Preload] D:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe (InterVideo Digital Technology Corporation)
O4 - HKLM..\Run: [vProt] C:\Program Files\AVG Secure Search\vprot.exe ()
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-344913941-3471796240-1914063461-1003..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Java Plug-in 10.4.0)
O16 - DPF: {CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Java Plug-in 1.7.0_04)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Java Plug-in 1.7.0_04)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{50E6DAB6-9BEC-4369-A06E-603C8AD0FFC5}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\11.1.0\ViProtocol.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{898dd47f-4f5a-11e1-9798-0019663055af}\Shell - "" = AutoRun
O33 - MountPoints2\{898dd47f-4f5a-11e1-9798-0019663055af}\Shell\AutoRun\command - "" = F:\Setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2012/06/22 20:26:01 | 000,000,000 | ---D | C] -- C:\_OTL
[2012/06/22 20:24:17 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012/06/21 17:38:24 | 000,000,000 | ---D | C] -- C:\Users\Komputer\Desktop\modyyyy D
[2012/06/21 14:30:28 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
[2012/06/21 14:30:27 | 000,000,000 | ---D | C] -- C:\Program Files\hjackthis
[2012/06/20 19:51:56 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\AVG2012
[2012/06/20 19:50:47 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\AVG Secure Search
[2012/06/20 19:50:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
[2012/06/20 19:50:09 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG Secure Search
[2012/06/20 19:50:02 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\AVG Secure Search
[2012/06/20 19:50:01 | 000,000,000 | ---D | C] -- C:\Program Files\AVG Secure Search
[2012/06/20 19:49:05 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2012/06/20 19:48:03 | 000,000,000 | -H-D | C] -- C:\$AVG
[2012/06/20 19:48:03 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG2012
[2012/06/20 19:48:03 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\AVG
[2012/06/20 19:47:07 | 000,000,000 | ---D | C] -- C:\Program Files\AVG
[2012/06/20 19:43:24 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData
[2012/06/20 18:47:26 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2012/06/20 18:47:26 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2012/06/19 16:37:46 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2012/06/17 21:08:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unibrain ubCore
[2012/06/17 21:08:54 | 000,000,000 | ---D | C] -- C:\Program Files\Unibrain
[2012/06/17 21:04:17 | 000,000,000 | ---D | C] -- C:\Users\Komputer\Desktop\WinXP_SP2
[2012/06/17 21:04:17 | 000,000,000 | ---D | C] -- C:\Users\Komputer\Desktop\Win2000_XP_2003
[2012/06/16 19:13:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2012/06/14 22:07:31 | 000,000,000 | ---D | C] -- C:\Users\Komputer\Documents\Ulead VideoStudio
[2012/06/14 22:07:24 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\Ulead Systems
[2012/06/14 21:42:01 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InterVideo
[2012/06/14 21:41:44 | 000,000,000 | ---D | C] -- C:\ProgramData\InterVideo
[2012/06/14 21:41:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ulead VideoStudio 11
[2012/06/14 21:40:43 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Components
[2012/06/14 21:39:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Ulead Systems
[2012/06/14 21:39:43 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Ulead Systems
[2012/06/14 21:21:54 | 000,000,000 | ---D | C] -- C:\Windows\Downloaded Installations
[2012/06/14 21:19:08 | 000,319,968 | R--- | C] (Microsoft Corporation) -- C:\Windows\difxapi.dll
[2012/06/14 21:14:59 | 000,010,112 | ---- | C] (OrangeWare Corporation) -- C:\Windows\System32\drivers\o1394b.sys
[2012/06/14 21:14:59 | 000,000,000 | ---D | C] -- C:\Windows\drivers
[2012/06/14 21:12:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2012/06/14 21:11:06 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2012/06/14 21:10:47 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2012/06/14 21:10:47 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2012/06/14 21:10:46 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2012/06/11 14:04:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maxis
[2012/06/11 14:02:38 | 000,304,640 | ---- | C] (InstallShield Software Corporation) -- C:\Windows\IsUn0415.exe
[2012/06/09 22:14:06 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\Toribash
[2012/06/06 16:36:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bethesda Softworks
[2012/06/06 16:35:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2012/06/06 16:34:58 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Local\Oblivion
[2012/06/06 16:34:58 | 000,000,000 | ---D | C] -- C:\Users\Komputer\Documents\My Games
[2012/06/04 22:42:38 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2012/06/04 22:41:16 | 000,772,504 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
[2012/06/04 22:41:16 | 000,227,784 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2012/06/04 22:40:35 | 000,174,024 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2012/06/04 22:40:35 | 000,174,024 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2012/06/03 20:22:10 | 000,000,000 | ---D | C] -- C:\Users\Komputer\AppData\Roaming\.techniclauncher
[2012/06/03 11:18:25 | 000,000,000 | -HSD | C] -- C:\found.000

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2012/06/22 20:40:08 | 000,001,070 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-344913941-3471796240-1914063461-1001UA.job
[2012/06/22 20:29:01 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/06/22 20:28:36 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/06/22 20:28:33 | 804,757,504 | -HS- | M] () -- C:\hiberfil.sys
[2012/06/22 20:27:20 | 000,020,640 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/06/22 20:27:19 | 000,020,640 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/06/22 20:23:58 | 000,033,758 | ---- | M] () -- C:\Users\Komputer\AppData\Local\dt.dat
[2012/06/22 20:13:01 | 000,001,040 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/06/22 20:01:03 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/06/22 18:11:16 | 100,638,127 | ---- | M] () -- C:\Windows\System32\drivers\AVG\incavi.avm
[2012/06/22 08:55:41 | 000,378,936 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012/06/21 14:30:28 | 000,002,999 | ---- | M] () -- C:\Users\Komputer\Desktop\HiJackThis.lnk
[2012/06/20 19:50:34 | 000,000,965 | ---- | M] () -- C:\Users\Public\Desktop\AVG 2012.lnk
[2012/06/20 18:49:22 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2012/06/19 15:34:15 | 000,006,679 | ---- | M] () -- C:\Users\Komputer\Desktop\H01582zdj6.jpg
[2012/06/19 15:34:10 | 000,006,498 | ---- | M] () -- C:\Users\Komputer\Desktop\H01582zdj2.jpg
[2012/06/19 15:34:04 | 000,004,446 | ---- | M] () -- C:\Users\Komputer\Desktop\H01582zdj1.jpg
[2012/06/19 15:23:30 | 000,037,975 | ---- | M] () -- C:\Users\Komputer\Desktop\szkola (1)sgd.jpg
[2012/06/14 22:02:12 | 000,042,679 | ---- | M] () -- C:\Users\Komputer\Desktop\lekcja kaliska IIIb 001.jpg
[2012/06/14 22:00:25 | 000,028,171 | ---- | M] () -- C:\Users\Komputer\Desktop\szkola.jpg
[2012/06/14 21:59:31 | 000,066,186 | ---- | M] () -- C:\Users\Komputer\Desktop\5.jpg
[2012/06/14 21:41:10 | 000,001,024 | ---- | M] () -- C:\Users\Public\Desktop\Ulead VideoStudio 11.lnk
[2012/06/14 21:19:10 | 000,000,043 | ---- | M] () -- C:\Windows\System\Cm108.ini
[2012/06/14 21:12:52 | 000,000,412 | ---- | M] () -- C:\Windows\ODBC.INI
[2012/06/13 20:43:17 | 000,699,788 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2012/06/13 20:43:17 | 000,611,076 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/06/13 20:43:17 | 000,135,178 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2012/06/13 20:43:17 | 000,107,262 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/06/13 15:41:36 | 000,213,972 | ---- | M] () -- C:\Users\Komputer\Desktop\czapki2.jpg
[2012/06/12 09:46:39 | 000,002,415 | ---- | M] () -- C:\Users\Komputer\Desktop\Google Chrome.lnk
[2012/06/11 08:40:00 | 000,001,018 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-344913941-3471796240-1914063461-1001Core.job
[2012/06/09 22:13:53 | 000,000,708 | ---- | M] () -- C:\Users\Komputer\Desktop\Toribash.lnk
[2012/06/06 16:52:45 | 000,001,004 | ---- | M] () -- C:\Users\Public\Desktop\Oblivion.lnk
[2012/06/04 22:40:14 | 000,227,784 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2012/06/04 22:40:14 | 000,174,024 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2012/06/04 22:40:14 | 000,174,024 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2012/06/01 11:13:54 | 000,000,319 | ---- | M] () -- C:\Windows\game.ini
[2012/05/27 16:25:07 | 004,396,027 | ---- | M] () -- C:\Users\Komputer\Desktop\minecraft.jar

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2012/06/22 20:23:58 | 000,033,758 | ---- | C] () -- C:\Users\Komputer\AppData\Local\dt.dat
[2012/06/22 18:11:16 | 100,638,127 | ---- | C] () -- C:\Windows\System32\drivers\AVG\incavi.avm
[2012/06/22 08:55:08 | 000,378,936 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2012/06/21 14:30:28 | 000,002,999 | ---- | C] () -- C:\Users\Komputer\Desktop\HiJackThis.lnk
[2012/06/20 19:50:34 | 000,000,965 | ---- | C] () -- C:\Users\Public\Desktop\AVG 2012.lnk
[2012/06/19 15:34:17 | 000,006,679 | ---- | C] () -- C:\Users\Komputer\Desktop\H01582zdj6.jpg
[2012/06/19 15:34:12 | 000,006,498 | ---- | C] () -- C:\Users\Komputer\Desktop\H01582zdj2.jpg
[2012/06/19 15:34:07 | 000,004,446 | ---- | C] () -- C:\Users\Komputer\Desktop\H01582zdj1.jpg
[2012/06/19 15:23:43 | 000,037,975 | ---- | C] () -- C:\Users\Komputer\Desktop\szkola (1)sgd.jpg
[2012/06/14 22:49:44 | 002,230,097 | ---- | C] () -- C:\Users\Komputer\Desktop\MLB Snapback.jpg
[2012/06/14 22:49:44 | 001,055,423 | ---- | C] () -- C:\Users\Komputer\Desktop\New York Yankees.jpg
[2012/06/14 22:49:44 | 000,433,833 | ---- | C] () -- C:\Users\Komputer\Desktop\Atlanta Braves.jpg
[2012/06/14 22:49:44 | 000,315,979 | ---- | C] () -- C:\Users\Komputer\Desktop\Okaland Athletics.jpg
[2012/06/14 22:49:44 | 000,309,830 | ---- | C] () -- C:\Users\Komputer\Desktop\Boston Red Sox.jpg
[2012/06/14 22:49:44 | 000,258,267 | ---- | C] () -- C:\Users\Komputer\Desktop\Pittsburgh Pirates.jpg
[2012/06/14 22:49:44 | 000,228,042 | ---- | C] () -- C:\Users\Komputer\Desktop\Los Angeles Dodgers.jpg
[2012/06/14 22:49:44 | 000,201,582 | ---- | C] () -- C:\Users\Komputer\Desktop\Philadelphia Phillies.jpg
[2012/06/14 22:49:44 | 000,068,225 | ---- | C] () -- C:\Users\Komputer\Desktop\New York Mets.jpg
[2012/06/14 22:02:16 | 000,042,679 | ---- | C] () -- C:\Users\Komputer\Desktop\lekcja kaliska IIIb 001.jpg
[2012/06/14 22:00:25 | 000,028,171 | ---- | C] () -- C:\Users\Komputer\Desktop\szkola.jpg
[2012/06/14 21:59:35 | 000,066,186 | ---- | C] () -- C:\Users\Komputer\Desktop\5.jpg
[2012/06/14 21:41:42 | 000,210,456 | ---- | C] () -- C:\Windows\System32\IVIresizeW7.dll
[2012/06/14 21:41:42 | 000,206,360 | ---- | C] () -- C:\Windows\System32\IVIresizeA6.dll
[2012/06/14 21:41:42 | 000,198,168 | ---- | C] () -- C:\Windows\System32\IVIresizeP6.dll
[2012/06/14 21:41:42 | 000,198,168 | ---- | C] () -- C:\Windows\System32\IVIresizeM6.dll
[2012/06/14 21:41:42 | 000,194,072 | ---- | C] () -- C:\Windows\System32\IVIresizePX.dll
[2012/06/14 21:41:42 | 000,026,136 | ---- | C] () -- C:\Windows\System32\IVIresize.dll
[2012/06/14 21:41:10 | 000,001,024 | ---- | C] () -- C:\Users\Public\Desktop\Ulead VideoStudio 11.lnk
[2012/06/14 21:19:10 | 000,065,536 | R--- | C] () -- C:\Windows\System32\CmiInstallResAll.dll
[2012/06/14 21:19:10 | 000,000,043 | ---- | C] () -- C:\Windows\System\Cm108.ini
[2012/06/14 21:19:08 | 000,000,707 | R--- | C] () -- C:\Windows\cm108.ini
[2012/06/13 15:40:22 | 000,213,972 | ---- | C] () -- C:\Users\Komputer\Desktop\czapki2.jpg
[2012/06/09 22:13:53 | 000,000,708 | ---- | C] () -- C:\Users\Komputer\Desktop\Toribash.lnk
[2012/06/06 16:52:45 | 000,001,004 | ---- | C] () -- C:\Users\Public\Desktop\Oblivion.lnk
[2012/06/01 11:13:53 | 000,000,319 | ---- | C] () -- C:\Windows\game.ini
[2012/05/29 20:03:00 | 004,396,027 | ---- | C] () -- C:\Users\Komputer\Desktop\minecraft.jar
[2012/05/24 17:34:20 | 001,058,316 | ---- | C] (                                                                                                    ) -- C:\Users\Komputer\Desktop\Minecraft Version Changer.exe
[2012/04/22 22:12:22 | 004,424,704 | ---- | C] () -- C:\Windows\System32\ffmpeg.dll
[2012/04/21 14:25:17 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat
[2012/04/12 19:56:37 | 000,017,408 | ---- | C] () -- C:\Users\Komputer\AppData\Local\WebpageIcons.db
[2012/04/09 01:40:36 | 000,079,360 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2012/04/09 01:39:46 | 000,260,608 | ---- | C] () -- C:\Windows\System32\TomsMoComp_ff.dll
[2012/04/09 01:39:32 | 000,158,720 | ---- | C] () -- C:\Windows\System32\ff_unrar.dll
[2012/04/09 01:39:32 | 000,099,840 | ---- | C] () -- C:\Windows\System32\ff_wmv9.dll
[2012/04/09 01:39:30 | 001,525,248 | ---- | C] () -- C:\Windows\System32\ff_samplerate.dll
[2012/04/09 01:39:30 | 000,146,944 | ---- | C] () -- C:\Windows\System32\ff_libmad.dll
[2012/04/09 01:39:28 | 000,212,480 | ---- | C] () -- C:\Windows\System32\ff_libdts.dll
[2012/04/09 01:39:28 | 000,115,200 | ---- | C] () -- C:\Windows\System32\ff_liba52.dll
[2012/04/09 01:39:26 | 000,328,704 | ---- | C] () -- C:\Windows\System32\ff_libfaad2.dll
[2012/04/04 15:59:08 | 000,182,272 | ---- | C] () -- C:\Windows\patchw32.dll
[2012/03/29 16:21:26 | 000,172,032 | ---- | C] () -- C:\Windows\System32\libbluray.dll
[2012/03/29 16:21:18 | 006,582,226 | ---- | C] () -- C:\Windows\System32\avcodec-lav-54.dll
[2012/03/29 16:21:18 | 001,152,365 | ---- | C] () -- C:\Windows\System32\avformat-lav-54.dll
[2012/03/29 16:21:18 | 000,374,152 | ---- | C] () -- C:\Windows\System32\swscale-lav-2.dll
[2012/03/29 16:21:18 | 000,207,872 | ---- | C] () -- C:\Windows\System32\avutil-lav-51.dll
[2012/03/29 16:21:18 | 000,144,523 | ---- | C] () -- C:\Windows\System32\avfilter-lav-2.dll
[2012/02/01 03:16:20 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI
[2011/12/25 23:11:55 | 000,699,788 | ---- | C] () -- C:\Windows\System32\perfh015.dat
[2011/12/25 23:11:55 | 000,337,158 | ---- | C] () -- C:\Windows\System32\perfi015.dat
[2011/12/25 23:11:55 | 000,135,178 | ---- | C] () -- C:\Windows\System32\perfc015.dat
[2011/12/25 23:11:55 | 000,038,710 | ---- | C] () -- C:\Windows\System32\perfd015.dat
[2011/12/07 21:32:24 | 000,216,064 | ---- | C] ( ) -- C:\Windows\System32\Lagarith.dll
[2011/10/15 10:54:52 | 000,321,856 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe
[2011/09/08 16:00:52 | 000,150,528 | ---- | C] () -- C:\Windows\System32\mkx.dll
[2011/09/08 16:00:48 | 000,142,336 | ---- | C] () -- C:\Windows\System32\mp4.dll
[2011/09/08 16:00:42 | 000,123,392 | ---- | C] () -- C:\Windows\System32\ogm.dll
[2011/09/08 16:00:38 | 000,249,856 | ---- | C] () -- C:\Windows\System32\dxr.dll
[2011/09/08 16:00:34 | 000,113,152 | ---- | C] () -- C:\Windows\System32\dsmux.exe
[2011/09/08 16:00:24 | 000,154,624 | ---- | C] () -- C:\Windows\System32\ts.dll
[2011/09/08 16:00:10 | 000,137,728 | ---- | C] () -- C:\Windows\System32\mkv2vfr.exe
[2011/09/08 16:00:06 | 000,358,400 | ---- | C] () -- C:\Windows\System32\gdsmux.exe
[2011/09/08 15:59:54 | 000,080,384 | ---- | C] () -- C:\Windows\System32\mkzlib.dll
[2011/09/08 15:59:52 | 000,024,576 | ---- | C] () -- C:\Windows\System32\mkunicode.dll
[2011/05/30 15:42:50 | 000,240,640 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2011/03/03 13:39:56 | 000,109,568 | ---- | C] () -- C:\Windows\System32\avi.dll
[2011/03/03 13:38:10 | 000,097,792 | ---- | C] () -- C:\Windows\System32\avs.dll
[2011/03/03 13:37:50 | 000,093,184 | ---- | C] () -- C:\Windows\System32\avss.dll
[2010/11/20 23:29:34 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2010/11/20 23:29:26 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2010/08/18 21:56:38 | 000,000,151 | ---- | C] () -- C:\Windows\System32\Registration.ini

[color=#E56717]========== LOP Check ==========[/color]

[2012/06/22 16:50:03 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\.minecraft
[2012/06/03 20:22:50 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\.techniclauncher
[2012/05/07 22:41:43 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\AnvSoft
[2012/06/20 19:51:56 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\AVG2012
[2012/05/07 22:33:33 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\avidemux
[2012/04/29 22:29:01 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\BitTorrent
[2012/06/04 19:13:00 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\Broad Intelligence
[2012/06/13 20:41:18 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\DAEMON Tools Lite
[2012/04/14 20:01:26 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\FileZilla
[2012/02/06 20:35:49 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\GanymedeNet
[2012/03/15 01:37:37 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\gtk-2.0
[2012/06/13 20:42:42 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\Kingston
[2012/02/13 17:12:23 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\LolClient
[2012/04/24 15:13:02 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\Notepad++
[2012/03/28 05:54:09 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\Publish Providers
[2012/02/01 06:53:19 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\pymclevel
[2012/03/28 05:53:47 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\Sony
[2012/02/05 20:01:03 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\SystemRequirementsLab
[2012/05/07 23:13:27 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\systweak
[2012/04/25 20:17:22 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\TS3Client
[2012/06/14 22:11:30 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\Ulead Systems
[2012/06/19 17:40:57 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\uTorrent
[2012/05/07 22:57:08 | 000,000,000 | ---D | M] -- C:\Users\Komputer\AppData\Roaming\WinAVI
[2012/06/08 14:45:37 | 000,032,620 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

[color=#E56717]========== Purity Check ==========[/color]



< End of report >


Kod: Zaznacz wszystko

All processes killed
========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Registry value HKEY_USERS\S-1-5-21-344913941-3471796240-1914063461-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}\ deleted successfully.
HKEY_USERS\S-1-5-21-344913941-3471796240-1914063461-1001\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-344913941-3471796240-1914063461-1001\Software\Microsoft\Internet Explorer\SearchScopes\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-344913941-3471796240-1914063461-1001\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{5018CFD2-804D-4C99-9F81-25EAEA2769DE} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5018CFD2-804D-4C99-9F81-25EAEA2769DE}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}\ not found.
Registry value HKEY_USERS\S-1-5-21-344913941-3471796240-1914063461-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}\ not found.
Registry value HKEY_USERS\S-1-5-21-344913941-3471796240-1914063461-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{88C7F2AA-F93F-432C-8F0E-B7D85967A527} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{88C7F2AA-F93F-432C-8F0E-B7D85967A527}\ not found.
Registry value HKEY_USERS\S-1-5-21-344913941-3471796240-1914063461-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Tok-Cirrhatus deleted successfully.
C:\Users\Komputer\AppData\Local\Bron.tok-16-20 folder moved successfully.
C:\Users\Komputer\AppData\Local\Bron.tok-16-19 folder moved successfully.
C:\Users\Komputer\AppData\Local\Bron.tok-16-18 folder moved successfully.
C:\Users\Komputer\AppData\Local\Bron.tok-16-17 folder moved successfully.
C:\Users\Komputer\AppData\Local\Bron.tok-16-16 folder moved successfully.
C:\Users\Komputer\AppData\Local\Bron.tok-16-15 folder moved successfully.
C:\Users\Komputer\AppData\Local\Bron.tok-16-14 folder moved successfully.
C:\Users\Komputer\AppData\Local\Ok-SendMail-Bron-tok folder moved successfully.
C:\Users\Komputer\AppData\Local\Loc.Mail.Bron.Tok folder moved successfully.
C:\Users\Komputer\AppData\Local\Bron.tok-16-13 folder moved successfully.
C:\Users\Komputer\AppData\Local\Bron.tok.A16.em.bin moved successfully.
C:\Users\Komputer\AppData\Local\Update.16.Bron.Tok.bin moved successfully.
ADS C:\ProgramData\TEMP:05EE1EEF deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 56475 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Komputer
->Temp folder emptied: 46137042 bytes
->Temporary Internet Files folder emptied: 408006 bytes
->Java cache emptied: 5106937 bytes
->Google Chrome cache emptied: 34202713 bytes
->Flash cache emptied: 12118 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 132971 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 20334582 bytes

Total Files Cleaned = 101,00 mb


OTL by OldTimer - Version 3.2.50.0 log created on 06222012_202601

Files\Folders moved on Reboot...
C:\Users\Komputer\AppData\Local\Temp\REG88CF.tmp moved successfully.
C:\Users\Komputer\AppData\Local\Temp\~DFB2A6DB7E658EDCD6.TMP moved successfully.

Registry entries deleted on Reboot...


[wojtas]

Użyj AdwCleaner i kliknij w nim Delete (w przypadku Visty/Windows7 uruchom z prawokliku jako Administrator)
Pokaż raport z niego oraz napisz jak sytuacja

[marian96xd]

Sorry że mnie nie było te kilka dni, ale chwilowe problemy u dostawcy internetu
A raport proszę:

Kod: Zaznacz wszystko

# AdwCleaner v1.700 - Logfile created 06/26/2012 at 18:33:39
# Updated 26/06/2012 by Xplode
# Operating system : Windows 7 Ultimate Service Pack 1 (32 bits)
# User : Komputer - KOMPUTER-PC
# Running from : C:\Users\Komputer\Downloads\adwcleaner.exe
# Option [Delete]


***** [Services] *****

Stopped & Deleted : vToolbarUpdater11.1.0
Stopped & Deleted : Web Assistant Updater

***** [Files / Folders] *****

Folder Deleted : C:\Users\Komputer\AppData\Local\AVG Secure Search
Folder Deleted : C:\Users\Komputer\AppData\Local\Conduit
Folder Deleted : C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Folder Deleted : C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Folder Deleted : C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}
Folder Deleted : C:\Users\Komputer\AppData\LocalLow\AVG Secure Search
Folder Deleted : C:\Users\Komputer\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Komputer\AppData\LocalLow\Incredibar.com
Folder Deleted : C:\Users\Komputer\AppData\LocalLow\Softonic
Folder Deleted : C:\Users\Komputer\AppData\Roaming\Mozilla\Firefox\Profiles\6r4y840o.default\extensions\ffxtlbr@incredibar.com
Folder Deleted : C:\ProgramData\AVG Secure Search
Folder Deleted : C:\ProgramData\SweetIM
Folder Deleted : C:\Program Files\AVG Secure Search
Folder Deleted : C:\Program Files\Incredibar.com
Folder Deleted : C:\Program Files\SweetIM
Folder Deleted : C:\Program Files\Web Assistant
Folder Deleted : C:\Program Files\Common Files\AVG Secure Search
Folder Deleted : C:\Windows\Installer\{0965F857-DAAD-4F93-8054-0E2EC3C8C5B0}
Folder Deleted : C:\Windows\Installer\{FB697452-8CA4-46B4-98B1-165C922A2EF3}
File Deleted : C:\Users\Komputer\AppData\Roaming\Mozilla\Firefox\Profiles\6r4y840o.default\searchplugins\MyStart Search.xml
File Deleted : C:\Program Files\Mozilla Firefox\Plugins\npvsharetvplg.dll

***** [Registry] *****

[*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2790392
Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\IGearSettings
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\ImInstaller
Key Deleted : HKCU\Software\Incredibar.com
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\StartSearch
Key Deleted : HKCU\Software\SweetIm
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKLM\SOFTWARE\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\Incredibar.com
Key Deleted : HKLM\SOFTWARE\SweetIM
Key Deleted : HKLM\SOFTWARE\Web Assistant
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Deleted : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
Key Deleted : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
Key Deleted : HKLM\SOFTWARE\Classes\I
Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.dskBnd
Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.dskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr
Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\IncredibarApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\IncredibarApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
Key Deleted : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
Key Deleted : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
Key Deleted : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
Key Deleted : HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncher.1
Key Deleted : HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncher
Key Deleted : HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncherBHO.1
Key Deleted : HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncherBHO
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\sim-packages
Key Deleted : HKLM\SOFTWARE\Classes\Softonic.dskBnd
Key Deleted : HKLM\SOFTWARE\Classes\Softonic.dskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\Softonic.SoftonicHlpr
Key Deleted : HKLM\SOFTWARE\Classes\Softonic.SoftonicHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\SoftonicApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\SoftonicApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\srv.SoftonicSrvc
Key Deleted : HKLM\SOFTWARE\Classes\srv.SoftonicSrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0965F857-DAAD-4F93-8054-0E2EC3C8C5B0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FB697452-8CA4-46B4-98B1-165C922A2EF3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\incredibar
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SweetIM]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Sweetpacks Communicator]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]

***** [Registre - GUID] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B15F118E-AF21-45E8-A809-29FDD7362565}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C01315C7-B4E2-4864-B43D-5FAFC414D179}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{087CDC12-0A11-4D1D-8DCF-44185D7C3496}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{088BF3A9-6AE8-47B9-A3FB-26262F236C79}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2AC7B9EB-3881-4EB9-8DEE-0A731A309FDE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{349C0469-ACDD-49DF-9B3E-0D82E7C7DC4D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3D782BB2-F2A5-11D3-BF4C-000000000000}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{41226591-6F7A-4082-B63A-67FE4A0CF7A6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55D69CD1-6715-4C40-BF05-9519AC4DC6E6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66C8FD57-54C4-4D4F-BC95-DCCC763B410A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{717BAE33-7061-4279-8AE5-6C13BC8AF3F9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{84F06F7A-F811-48D7-8B34-3F4145183D8F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{88F6D55F-AA3F-4003-BE69-4AC1998D6492}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A0F66203-1A86-4812-9603-A57E09A4D7A3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BC39D1B3-4471-41C1-AACA-E097FAF4B7AA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DEB85542-1311-4EC6-8A32-5372EB27FC94}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11D9E165-B8C1-4734-A56C-BC4FCACA966B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{48C9C8B0-A546-46C1-A81F-47A31E623E9D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{79D60450-56C5-4A8C-9321-6D5BC2A81E5A}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{99C22A61-21BA-4F81-85FF-CDC9EB5DB10B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B15F118E-AF21-45E8-A809-29FDD7362565}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{BB7256DD-EBA9-480B-8441-A00388C2BEC3}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74C36554-31F0-49DD-8857-ED6A64DF45BE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9CF034EA-7B46-48D3-8895-8A14B32AE445}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403a-B9D2-65C292C39087}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5018CFD2-804D-4C99-9F81-25EAEA2769DE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E87806B5-E908-45FD-AF5E-957D83E58E68}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403a-B9D2-65C292C39087}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5018CFD2-804D-4C99-9F81-25EAEA2769DE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E87806B5-E908-45FD-AF5E-957D83E58E68}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F9639E4A-801B-4843-AEE3-03D9DA199E77}]

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.7601.17514

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://mystart.incredibar.com/mb165?a=6PQBqYktD1&i=26 --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://isearch.avg.com/tab?cid={78D0092D-F946-48B6-A3ED-5D449C9F5D26}&mid=6ebe35faed0247d0918cd10008b11d1b-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=pl&ds=AVG&pr=fr&d=2012-06-20 19:50:11&v=11.1.0.7&sap=nt --> hxxp://www.google.com

-\\ Mozilla Firefox v13.0.1 (pl)

Profile name : default
File : C:\Users\Komputer\AppData\Roaming\Mozilla\Firefox\Profiles\6r4y840o.default\prefs.js

C:\Users\Komputer\AppData\Roaming\Mozilla\Firefox\Profiles\6r4y840o.default\user.js ... Deleted !

Deleted : user_pref("avg.install.installDirPath", "C:\\ProgramData\\AVG Secure Search\\11.1.0.7");
Deleted : user_pref("avg.install.userHPSettings", "hxxp://mystart.incredibar.com/mb165?a=6PQBqYktD1&i=26");
Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Deleted : user_pref("browser.startup.homepage", "hxxp://mystart.incredibar.com/mb165?a=6PQBqYktD1&i=26");
Deleted : user_pref("extensions.enabledAddons", "ffxtlbr@incredibar.com:1.5.0,{F53C93F1-07D5-430c-86D4-C9531B2[...]
Deleted : user_pref("extensions.incredibar.admin", false);
Deleted : user_pref("extensions.incredibar.aflt", "orgnl");
Deleted : user_pref("extensions.incredibar.cntry", "PL");
Deleted : user_pref("extensions.incredibar.dfltLng", "");
Deleted : user_pref("extensions.incredibar.dfltSrch", false);
Deleted : user_pref("extensions.incredibar.did", "10665");
Deleted : user_pref("extensions.incredibar.envrmnt", "production");
Deleted : user_pref("extensions.incredibar.excTlbr", false);
Deleted : user_pref("extensions.incredibar.hdrMd5", "C4F9CAC84DB56D44F9303CE0883234E0");
Deleted : user_pref("extensions.incredibar.hmpg", false);
Deleted : user_pref("extensions.incredibar.id", "00ea5bcd00000000000000494e55f4e8");
Deleted : user_pref("extensions.incredibar.installerproductid", "26");
Deleted : user_pref("extensions.incredibar.instlDay", "15515");
Deleted : user_pref("extensions.incredibar.instlRef", "");
Deleted : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1411:52:44");
Deleted : user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
Deleted : user_pref("extensions.incredibar.newTab", false);
Deleted : user_pref("extensions.incredibar.noFFXTlbr", false);
Deleted : user_pref("extensions.incredibar.ppd", "");
Deleted : user_pref("extensions.incredibar.prdct", "incredibar");
Deleted : user_pref("extensions.incredibar.productid", "26");
Deleted : user_pref("extensions.incredibar.prtnrId", "Incredibar");
Deleted : user_pref("extensions.incredibar.sg", "none");
Deleted : user_pref("extensions.incredibar.smplGrp", "none");
Deleted : user_pref("extensions.incredibar.tlbrId", "base");
Deleted : user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6PQBqYktD1&loc=IB_T[...]
Deleted : user_pref("extensions.incredibar.upn2", "6PQBqYktD1");
Deleted : user_pref("extensions.incredibar.upn2n", "92543114941564679");
Deleted : user_pref("extensions.incredibar.vrsn", "1.5.11.14");
Deleted : user_pref("extensions.incredibar.vrsnTs", "1.5.11.1411:52:44");
Deleted : user_pref("extensions.incredibar.vrsni", "1.5.11.14");
Deleted : user_pref("extensions.incredibar_i.aflt", "orgnl");
Deleted : user_pref("extensions.incredibar_i.dfltLng", "");
Deleted : user_pref("extensions.incredibar_i.did", "10665");
Deleted : user_pref("extensions.incredibar_i.excTlbr", false);
Deleted : user_pref("extensions.incredibar_i.id", "00ea5bcd00000000000000494e55f4e8");
Deleted : user_pref("extensions.incredibar_i.installerproductid", "26");
Deleted : user_pref("extensions.incredibar_i.instlDay", "15515");
Deleted : user_pref("extensions.incredibar_i.instlRef", "");
Deleted : user_pref("extensions.incredibar_i.ms_url_id", "");
Deleted : user_pref("extensions.incredibar_i.newTab", false);
Deleted : user_pref("extensions.incredibar_i.ppd", "");
Deleted : user_pref("extensions.incredibar_i.prdct", "incredibar");
Deleted : user_pref("extensions.incredibar_i.productid", "26");
Deleted : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
Deleted : user_pref("extensions.incredibar_i.smplGrp", "none");
Deleted : user_pref("extensions.incredibar_i.tlbrId", "base");
Deleted : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6PQBqYktD1&loc=IB[...]
Deleted : user_pref("extensions.incredibar_i.upn2", "6PQBqYktD1");
Deleted : user_pref("extensions.incredibar_i.upn2n", "92543114941564679");
Deleted : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
Deleted : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1411:52:44");
Deleted : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
Deleted : user_pref("keyword.URL", "hxxp://isearch.avg.com/search?cid=%7B0a67cb4f-f1f5-43ef-80b4-d64563d71474%[...]
Deleted : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_whiteList", "{\"search.babylon.com\[...]

-\\ Google Chrome v19.0.1084.56

File : C:\Users\Komputer\AppData\Local\Google\Chrome\User Data\Default\Preferences

Deleted :       "icon_url": "hxxp://mystart.incredibar.com/mb165/favicon.ico",
Deleted :       "keyword": "mystart.incredibar.com/mb165",
Deleted :       "search_url": "hxxp://mystart.incredibar.com/mb165/?loc=IB_DS&search={searchTerms}&a=6PQBqYktD[...]
Deleted :                "description": "SweetIm for Facebook",
Deleted :                "name": "SweetIM for Facebook",
Deleted :          "name": "vShare.tv plug-in",
Deleted :          "path": "C:\\Program Files\\Mozilla Firefox\\plugins\\npvsharetvplg.dll",
Deleted :          "name": "vShare.tv plug-in"
Deleted :          "path": "C:\\Program Files\\Common Files\\AVG Secure Search\\SiteSafetyInstaller\\11.1.0\\\[...]

*************************

AdwCleaner[S1].txt - [23847 octets] - [26/06/2012 18:33:39]

########## EOF - C:\AdwCleaner[S1].txt - [23976 octets] ##########


Sytuacja ma się tak. Komputer jak zamulał tak zamula, udało mi się do tego przyzwyczaić, co do bluescreena to wyskakuje on rzadziej, ale występuje i to jest najgorsze, bo bardzo
utrudnia życie

[wojtas]

daj nowy zestaw logów, zrób pełny skan Malwarebytes i pokaż raport