Zacinające się przeglądarki (mozilla, chrome),

**Posty:** 4 · przez **sylwekmario** 20 Lut 2013, 11:21

Witam,
Prosiłbym o pomoc. Od wczoraj mam problemy z komputerem. Ogólnie wolniej chodzi, ale najgorszy problem jest z przeglądaniem stron internetowych. Nic nie mogę zrobić. Wszystko się zacina i uruchamia po dłuuugim czasie. Sprawdzałem juz co mogłem, ale nic nie pomaga. Starałem się dostosować do instrukcji na forum i odinstalowałem daemon toolsa, chciałem zadziałać combofixem, ale przeczytałem tutaj, że to tylko dla zaawansowanych więc sie wycofałem. Wspomnę tylko, że raz już działałem tym programem gdy wyskoczył mi wirus z cyberprzestępczością, bo wyczytałem o tym na forum i wszystko ładnie potem śmigało. Jeśli to też może w czymś pomóć to mam NOD32 i w kwarantannie miałem z 30 wirusów które właśnie wczoraj z niej usunąłem. Do tej pory nie miałem większych problemów w komputerem.
Zamieszczam zrobione logi programem, który był zalecany (zamiast combofixa

)
Z góry dziękuję za pomoc i mówię, że to mój pierwszy wpis na tym forum więc proszę o wyrozumiałość w razie błędów

**Posty:** 18165 · przez **wojtas** 20 Lut 2013, 18:41

odinstaluj:
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"Akamai" = Akamai NetSession Interface Service

i jeśli nie znasz to:
MyFreeCodec

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\RtsUCcid.sys -- (USBCCID)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\Rts516xIR.sys -- (RtsUIR)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\RtsUStor.sys -- (RSUSBSTOR)
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1&cf=547f7c04-44ff-11e1-bbc8-88ae1dd89883
IE - HKLM\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=547f7c04-44ff-11e1-bbc8-88ae1dd89883&q={searchTerms}
IE - HKU\S-1-5-21-1398826653-280620893-4223977617-1000\..\SearchScopes\{0086C0F6-FD67-4C4F-8297-230E07CEF885}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=C9C4D4C8-2403-43A2-AC80-4606B7A31326&apn_sauid=BFD595A2-21A3-495B-8FCF-497AFF99EF20
IE - HKU\S-1-5-21-1398826653-280620893-4223977617-1000\..\SearchScopes\{8CC20648-B7E6-482B-AEE6-8FA724E70CD9}: "URL" = http://www.daemon-search.com/search?q={searchTerms}
IE - HKU\S-1-5-21-1398826653-280620893-4223977617-1000\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=547f7c04-44ff-11e1-bbc8-88ae1dd89883&q={searchTerms}
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.defaultthis.engineName: "Veoh Web Player Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2653012&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2653012&q="
FF - user.js - File not found
[2012-01-22 14:45:45 | 000,000,000 | ---D | M] (VshareComplete - Speed up your search with your personal search suggestions tool) -- C:\Users\Mariusz\AppData\Roaming\mozilla\Firefox\Profiles\2zh919ph.default\extensions\{4ac04d99-3f4b-4ec5-bd2d-216d59822f8a}
[2012-12-28 19:24:48 | 000,000,000 | ---D | M] (InnoGames International Community Toolbar) -- C:\Users\Mariusz\AppData\Roaming\mozilla\Firefox\Profiles\2zh919ph.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}
[2012-12-28 19:24:46 | 000,000,000 | ---D | M] (Veoh Web Player Community Toolbar) -- C:\Users\Mariusz\AppData\Roaming\mozilla\Firefox\Profiles\2zh919ph.default\extensions\{cd90bf73-20f6-44ef-993d-bb920303bd2e}
[2012-11-23 22:20:58 | 000,002,308 | ---- | M] () -- C:\Users\Mariusz\AppData\Roaming\mozilla\firefox\profiles\2zh919ph.default\searchplugins\askcom.xml
[2010-06-29 17:22:34 | 000,000,933 | ---- | M] () -- C:\Users\Mariusz\AppData\Roaming\mozilla\firefox\profiles\2zh919ph.default\searchplugins\conduit.xml
[2011-01-02 20:30:59 | 000,002,055 | ---- | M] () -- C:\Users\Mariusz\AppData\Roaming\mozilla\firefox\profiles\2zh919ph.default\searchplugins\daemon-search.xml
[2012-01-22 14:45:41 | 000,000,792 | ---- | M] () -- C:\Users\Mariusz\AppData\Roaming\mozilla\firefox\profiles\2zh919ph.default\searchplugins\startsear.xml
O4 - HKLM..\Run: [DivXMediaServer] C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe File not found

:Commands
[emptytemp]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

Użyj AdwCleaner i kliknij w nim Usuń (w przypadku Visty/Windows7 uruchom z prawokliku jako Administrator)
Pokaż raport z niego

Następnie uruchamiasz OTL z opcją skanuj. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia (zawartość notatnika, która otworzyła się po restarcie).

**Posty:** 4 · przez **sylwekmario** 20 Lut 2013, 23:30

To jest Log o, który prosiłeś z Cleanera

Kod: Zaznacz wszystko: # AdwCleaner v2.112 - Log utworzony 20/02/2013 o 22:21:53 # Aktualizacja 10/02/2013 przez Xplode # System operacyjny : Windows 7 Professional Service Pack 1 (32 bits) # U¿ytkownik : Mariusz - KOMPUTEREK # Tryb uruchomienia : Normalny # Œcie¿ka : C:\Users\Mariusz\Downloads\adwcleaner0.exe # Opcja [Usuñ] ***** [Us³ugi] ***** ***** [Pliki / Foldery] ***** Folder Usuniêto : C:\Program Files\Common Files\AVG Secure Search Folder Usuniêto : C:\Program Files\VshareComplete Folder Usuniêto : C:\ProgramData\Ask Folder Usuniêto : C:\Users\Mariusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda Folder Usuniêto : C:\Users\Mariusz\AppData\Roaming\Mozilla\Firefox\Profiles\2zh919ph.default\Co nduit Folder Usuniêto : C:\Users\Mariusz\AppData\Roaming\VshareComplete Plik Usuniêto : C:\Program Files\Mozilla Firefox\Plugins\npvsharetvplg.dll ***** [Rejestr] ***** Klucz Usuniêto : HKCU\Software\Conduit Klucz Usuniêto : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323- 798E-4AEA-9A57-88F4B05FD5DD} Klucz Usuniêto : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B- 3BCA-4158-B330-F66DBB03C1B5} Klucz Usuniêto : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8- 488B-4107-BCEE-B161AB4E4183} Klucz Usuniêto : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{222F31FB-A14E- 4AF2-BB14-997F28294370} Klucz Usuniêto : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132- 4136-9E9A-4E364A424E17} Klucz Usuniêto : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7AC3E13B-3BCA- 4158-B330-F66DBB03C1B5} Klucz Usuniêto : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{222F31FB-A14E-4AF2- BB14-997F28294370} Klucz Usuniêto : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136- 9E9A-4E364A424E17} Klucz Usuniêto : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7AC3E13B-3BCA-4158- B330-F66DBB03C1B5} Klucz Usuniêto : HKCU\Software\Softonic Klucz Usuniêto : HKCU\Software\StartSearch Klucz Usuniêto : HKLM\SOFTWARE\Classes\CLSID\{222F31FB-A14E-4AF2-BB14- 997F28294370} Klucz Usuniêto : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C- 1ED148AC8EEE} Klucz Usuniêto : HKLM\SOFTWARE\Classes\CLSID\{7AC3E13B-3BCA-4158-B330- F66DBB03C1B5} Klucz Usuniêto : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540- 082B8C2AE556} Klucz Usuniêto : HKLM\SOFTWARE\Classes\CLSID\{8F97BFF8-488B-4107-BCEE- B161AB4E4183} Klucz Usuniêto : HKLM\SOFTWARE\Classes\CLSID\{A1B48071-416D-474E-A13B- BE5456E7FC31} Klucz Usuniêto : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673- 4ED3E9456D39} Klucz Usuniêto : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35- 733216D61217} Klucz Usuniêto : HKLM\SOFTWARE\Classes\Interface\{3D782BB2-F2A5-11D3-BF4C- 000000000000} Klucz Usuniêto : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C- 1ED148AC8EEE} Klucz Usuniêto : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B- A55F4BCB0BEC} Klucz Usuniêto : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556- 8B501182874E} Klucz Usuniêto : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3- 56FC5162A994} Klucz Usuniêto : HKLM\SOFTWARE\Classes\TypeLib\{79D60450-56C5-4A8C-9321- 6D5BC2A81E5A} Klucz Usuniêto : HKLM\SOFTWARE\Classes\TypeLib\{99C22A61-21BA-4F81-85FF- CDC9EB5DB10B} Klucz Usuniêto : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6- A66D8DC9E1D8} Klucz Usuniêto : HKLM\Software\Conduit Klucz Usuniêto : HKLM\SOFTWARE\Google\Chrome\Extensions\dlfienamagdnkekbbbocojppncdambda Klucz Usuniêto : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{222F31FB-A14E-4AF2-BB14-997F28294370} Klucz Usuniêto : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B- 3BCA-4158-B330-F66DBB03C1B5} Klucz Usuniêto : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8- 488B-4107-BCEE-B161AB4E4183} Klucz Usuniêto : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071- 416D-474E-A13B-BE5456E7FC31} Klucz Usuniêto : HKLM\Software\SimplyGen Wartoœæ Usuniêto : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}] ***** [Przegl¹darki Internetowe] ***** -\\ Internet Explorer v9.0.8112.16464 [OK] Rejestr w porz¹dku. -\\ Mozilla Firefox v19.0 (pl) Plik : C:\Users\Mariusz\AppData\Roaming\Mozilla\Firefox\Profiles\2zh919ph.default\pr efs.js Usuniêto : user_pref("CT2653012..clientLogIsEnabled", false); Usuniêto : user_pref("CT2653012..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Usuniêto : user_pref("CT2653012..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Usuniêto : user_pref("CT2653012.ALLOW_SHOWING_HIDDEN_TOOLBAR", false); Usuniêto : user_pref("CT2653012.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Usuniêto : user_pref("CT2653012.BrowserCompStateIsOpen_129514968327663878", true); Usuniêto : user_pref("CT2653012.BrowserCompStateIsOpen_129780839977253423", true); Usuniêto : user_pref("CT2653012.BrowserCompStateIsOpen_129780841964128425", true); Usuniêto : user_pref("CT2653012.BrowserCompStateIsOpen_129780842340847176", true); Usuniêto : user_pref("CT2653012.CTID", "CT2653012"); Usuniêto : user_pref("CT2653012.CurrentServerDate", "13-9-2012"); Usuniêto : user_pref("CT2653012.DialogsAlignMode", "LTR"); Usuniêto : user_pref("CT2653012.DialogsGetterLastCheckTime", "Mon Sep 10 2012 22:19:02 GMT+0200"); Usuniêto : user_pref("CT2653012.DownloadReferralCookieData", ""); Usuniêto : user_pref("CT2653012.EMailNotifierPollDate", "Wed Oct 05 2011 13:56:07 GMT+0200"); Usuniêto : user_pref("CT2653012.FirstServerDate", "24-3-2011"); Usuniêto : user_pref("CT2653012.FirstTime", true); Usuniêto : user_pref("CT2653012.FirstTimeFF3", true); Usuniêto : user_pref("CT2653012.FixPageNotFoundErrors", true); Usuniêto : user_pref("CT2653012.GroupingServerCheckInterval", 1440); Usuniêto : user_pref("CT2653012.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Usuniêto : user_pref("CT2653012.HasUserGlobalKeys", true); Usuniêto : user_pref("CT2653012.Initialize", true); Usuniêto : user_pref("CT2653012.InitializeCommonPrefs", true); Usuniêto : user_pref("CT2653012.InstallationAndCookieDataSentCount", 3); Usuniêto : user_pref("CT2653012.InstalledDate", "Thu Mar 24 2011 10:53:56 GMT+0100"); Usuniêto : user_pref("CT2653012.InvalidateCache", false); Usuniêto : user_pref("CT2653012.IsGrouping", false); Usuniêto : user_pref("CT2653012.IsMulticommunity", false); Usuniêto : user_pref("CT2653012.IsOpenThankYouPage", true); Usuniêto : user_pref("CT2653012.IsOpenUninstallPage", true); Usuniêto : user_pref("CT2653012.LanguagePackLastCheckTime", "Thu Sep 13 2012 04:14:43 GMT+0200"); Usuniêto : user_pref("CT2653012.LanguagePackReloadIntervalMM", 1440); Usuniêto : user_pref("CT2653012.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Usuniêto : user_pref("CT2653012.LastLogin_3.13.0.6", "Tue Jul 17 2012 13:21:48 GMT+0200"); Usuniêto : user_pref("CT2653012.LastLogin_3.14.1.0", "Tue Aug 21 2012 19:35:36 GMT+0200"); Usuniêto : user_pref("CT2653012.LastLogin_3.15.1.0", "Thu Sep 13 2012 10:28:05 GMT+0200"); Usuniêto : user_pref("CT2653012.LastLogin_3.2.5.2", "Wed Oct 05 2011 10:59:00 GMT+0200"); Usuniêto : user_pref("CT2653012.LatestVersion", "3.14.1.0"); Usuniêto : user_pref("CT2653012.Locale", "en"); Usuniêto : user_pref("CT2653012.MCDetectTooltipHeight", "83"); Usuniêto : user_pref("CT2653012.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Usuniêto : user_pref("CT2653012.MCDetectTooltipWidth", "295"); Usuniêto : user_pref("CT2653012.MyStuffEnabledAtInstallation", true); Usuniêto : user_pref("CT2653012.RadioIsPodcast", false); Usuniêto : user_pref("CT2653012.RadioLastCheckTime", "Wed Oct 05 2011 06:33:41 GMT+0200"); Usuniêto : user_pref("CT2653012.RadioLastUpdateIPServer", "3"); Usuniêto : user_pref("CT2653012.RadioLastUpdateServer", "129438915777300000"); Usuniêto : user_pref("CT2653012.RadioMediaID", "21806912"); Usuniêto : user_pref("CT2653012.RadioMediaType", "Media Player"); Usuniêto : user_pref("CT2653012.RadioMenuSelectedID", "EBRadioMenu_CT265301221806912"); Usuniêto : user_pref("CT2653012.RadioStationName", "California%20Rock%20- %20Rock"); Usuniêto : user_pref("CT2653012.RadioStationURL", "hxxp://www.feedlive.net/california.asx"); Usuniêto : user_pref("CT2653012.SHRINK_TOOLBAR", 1); Usuniêto : user_pref("CT2653012.SearchEngine", "Web%20Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEAR[...] Usuniêto : user_pref("CT2653012.SearchFromAddressBarIsInit", true); Usuniêto : user_pref("CT2653012.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT265[...] Usuniêto : user_pref("CT2653012.SearchInNewTabEnabled", true); Usuniêto : user_pref("CT2653012.SearchInNewTabIntervalMM", 1440); Usuniêto : user_pref("CT2653012.SearchInNewTabLastCheckTime", "Wed Sep 12 2012 13:39:36 GMT+0200"); Usuniêto : user_pref("CT2653012.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Usuniêto : user_pref("CT2653012.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...] Usuniêto : user_pref("CT2653012.SearchProtectorToolbarDisabled", true); Usuniêto : user_pref("CT2653012.ServiceMapLastCheckTime", "Wed Sep 12 2012 13:39:36 GMT+0200"); Usuniêto : user_pref("CT2653012.SettingsLastCheckTime", "Thu Sep 13 2012 11:08:13 GMT+0200"); Usuniêto : user_pref("CT2653012.SettingsLastUpdate", "1347288122"); Usuniêto : user_pref("CT2653012.ThirdPartyComponentsInterval", 504); Usuniêto : user_pref("CT2653012.ThirdPartyComponentsLastCheck", "Sat Oct 01 2011 09:02:30 GMT+0200"); Usuniêto : user_pref("CT2653012.ThirdPartyComponentsLastUpdate", "1312887586"); Usuniêto : user_pref("CT2653012.ToolbarDisabled", true); Usuniêto : user_pref("CT2653012.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2653012"); Usuniêto : user_pref("CT2653012.TrustedApiDomains", "conduit.com,conduit- hosting.com,conduit-services.com,clien[...] Usuniêto : user_pref("CT2653012.UserID", "UN51595037167503730"); Usuniêto : user_pref("CT2653012.ValidationData_Search", 0); Usuniêto : user_pref("CT2653012.ValidationData_Toolbar", 2); Usuniêto : user_pref("CT2653012.WeatherNetwork", ""); Usuniêto : user_pref("CT2653012.WeatherPollDate", "Wed Oct 05 2011 13:46:07 GMT+0200"); Usuniêto : user_pref("CT2653012.WeatherUnit", "C"); Usuniêto : user_pref("CT2653012.alertChannelId", "1045667"); Usuniêto : user_pref("CT2653012.backendstorage.2653012a129780834468347070000000paramsgk0 ", "7B22757064617465526[...] Usuniêto : user_pref("CT2653012.backendstorage.cbcountry_001", "504C"); Usuniêto : user_pref("CT2653012.backendstorage.cbfirsttime", "546875204A756C20313220323031322030393A31353A32332[...] Usuniêto : user_pref("CT2653012.backendstorage.facebook_mode", "32"); Usuniêto : user_pref("CT2653012.backendstorage.facebook_user_locale", "656E"); Usuniêto : user_pref("CT2653012.backendstorage.shoppingapp.gk.exipres", "5765642053657020303520323031322031363A[...] Usuniêto : user_pref("CT2653012.backendstorage.shoppingapp.gk.geolocation", "706F6C616E64"); Usuniêto : user_pref("CT2653012.backendstorage.twitter_v1.8.0_twitter_app_open_t_f", "66616C7365"); Usuniêto : user_pref("CT2653012.backendstorage.url_history0001", "687474703A2F2F7777772E63696E656D612D636974792[...] Usuniêto : user_pref("CT2653012.components.1000234", true); Usuniêto : user_pref("CT2653012.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Usuniêto : user_pref("CT2653012.homepageProtectorEnableByLogin", true); Usuniêto : user_pref("CT2653012.initDone", true); Usuniêto : user_pref("CT2653012.myStuffEnabled", true); Usuniêto : user_pref("CT2653012.myStuffPublihserMinWidth", 400); Usuniêto : user_pref("CT2653012.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Usuniêto : user_pref("CT2653012.myStuffServiceIntervalMM", 1440); Usuniêto : user_pref("CT2653012.myStuffServiceUrl", "hxxp://mystuff.conduit- services.com/MyStuffService.ashx?Co[...] Usuniêto : user_pref("CT2653012.revertSettingsEnabled", true); Usuniêto : user_pref("CT2653012.searchProtectorDialogDelayInSec", 10); Usuniêto : user_pref("CT2653012.searchProtectorEnableByLogin", true); Usuniêto : user_pref("CT2653012.testingCtid", ""); Usuniêto : user_pref("CT2653012.toolbarAppMetaDataLastCheckTime", "Wed Sep 12 2012 13:39:37 GMT+0200"); Usuniêto : user_pref("CT2653012.toolbarContextMenuLastCheckTime", "Thu Mar 24 2011 10:54:00 GMT+0100"); Usuniêto : user_pref("CT2653012.usagesFlag", 2); Usuniêto : user_pref("CT2832595..clientLogIsEnabled", false); Usuniêto : user_pref("CT2832595..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Usuniêto : user_pref("CT2832595..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Usuniêto : user_pref("CT2832595.ALLOW_SHOWING_HIDDEN_TOOLBAR", false); Usuniêto : user_pref("CT2832595.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Usuniêto : user_pref("CT2832595.CTID", "CT2832595"); Usuniêto : user_pref("CT2832595.CurrentServerDate", "13-9-2012"); Usuniêto : user_pref("CT2832595.DialogsAlignMode", "LTR"); Usuniêto : user_pref("CT2832595.DialogsGetterLastCheckTime", "Wed Sep 12 2012 10:10:34 GMT+0200"); Usuniêto : user_pref("CT2832595.DownloadReferralCookieData", ""); Usuniêto : user_pref("CT2832595.FirstServerDate", "14-12-2010"); Usuniêto : user_pref("CT2832595.FirstTime", true); Usuniêto : user_pref("CT2832595.FirstTimeFF3", true); Usuniêto : user_pref("CT2832595.FixPageNotFoundErrors", true); Usuniêto : user_pref("CT2832595.GroupingServerCheckInterval", 1440); Usuniêto : user_pref("CT2832595.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Usuniêto : user_pref("CT2832595.HasUserGlobalKeys", true); Usuniêto : user_pref("CT2832595.Initialize", true); Usuniêto : user_pref("CT2832595.InitializeCommonPrefs", true); Usuniêto : user_pref("CT2832595.InstallationAndCookieDataSentCount", 3); Usuniêto : user_pref("CT2832595.InstallationType", "Unknown"); Usuniêto : user_pref("CT2832595.InstalledDate", "Tue Dec 14 2010 21:33:50 GMT+0100"); Usuniêto : user_pref("CT2832595.IsGrouping", false); Usuniêto : user_pref("CT2832595.IsMulticommunity", false); Usuniêto : user_pref("CT2832595.IsOpenThankYouPage", true); Usuniêto : user_pref("CT2832595.IsOpenUninstallPage", true); Usuniêto : user_pref("CT2832595.LanguagePackLastCheckTime", "Thu Sep 13 2012 11:08:15 GMT+0200"); Usuniêto : user_pref("CT2832595.LanguagePackReloadIntervalMM", 1440); Usuniêto : user_pref("CT2832595.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Usuniêto : user_pref("CT2832595.LastLogin_3.13.0.6", "Sun Jul 08 2012 20:32:15 GMT+0200"); Usuniêto : user_pref("CT2832595.LastLogin_3.14.1.0", "Sun Aug 26 2012 09:47:50 GMT+0200"); Usuniêto : user_pref("CT2832595.LastLogin_3.15.1.0", "Thu Sep 13 2012 10:28:05 GMT+0200"); Usuniêto : user_pref("CT2832595.LastLogin_3.2.5.2", "Wed Dec 15 2010 05:47:44 GMT+0100"); Usuniêto : user_pref("CT2832595.LatestVersion", "3.14.1.0"); Usuniêto : user_pref("CT2832595.Locale", "en"); Usuniêto : user_pref("CT2832595.MCDetectTooltipHeight", "83"); Usuniêto : user_pref("CT2832595.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Usuniêto : user_pref("CT2832595.MCDetectTooltipWidth", "295"); Usuniêto : user_pref("CT2832595.MyStuffEnabledAtInstallation", true); Usuniêto : user_pref("CT2832595.SearchBoxWidth", 150); Usuniêto : user_pref("CT2832595.SearchFromAddressBarIsInit", true); Usuniêto : user_pref("CT2832595.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT283[...] Usuniêto : user_pref("CT2832595.SearchInNewTabEnabled", true); Usuniêto : user_pref("CT2832595.SearchInNewTabIntervalMM", 1440); Usuniêto : user_pref("CT2832595.SearchInNewTabLastCheckTime", "Wed Sep 12 2012 13:39:43 GMT+0200"); Usuniêto : user_pref("CT2832595.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Usuniêto : user_pref("CT2832595.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...] Usuniêto : user_pref("CT2832595.SearchProtectorToolbarDisabled", true); Usuniêto : user_pref("CT2832595.ServiceMapLastCheckTime", "Wed Sep 12 2012 13:39:44 GMT+0200"); Usuniêto : user_pref("CT2832595.SettingsLastCheckTime", "Thu Sep 13 2012 11:08:14 GMT+0200"); Usuniêto : user_pref("CT2832595.SettingsLastUpdate", "1347288122"); Usuniêto : user_pref("CT2832595.ThirdPartyComponentsInterval", 504); Usuniêto : user_pref("CT2832595.ThirdPartyComponentsLastCheck", "Tue Dec 14 2010 21:33:48 GMT+0100"); Usuniêto : user_pref("CT2832595.ThirdPartyComponentsLastUpdate", "1246790578"); Usuniêto : user_pref("CT2832595.ToolbarDisabled", true); Usuniêto : user_pref("CT2832595.ToolbarShrinkedFromSetup", false); Usuniêto : user_pref("CT2832595.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2832595"); Usuniêto : user_pref("CT2832595.TrustedApiDomains", "conduit.com,conduit- hosting.com,conduit-services.com,clien[...] Usuniêto : user_pref("CT2832595.UserID", "UN03045887320059148"); Usuniêto : user_pref("CT2832595.ValidationData_Search", 0); Usuniêto : user_pref("CT2832595.ValidationData_Toolbar", 2); Usuniêto : user_pref("CT2832595.alertChannelId", "1224658"); Usuniêto : user_pref("CT2832595.backendstorage.activetoolbar", "677265706F"); Usuniêto : user_pref("CT2832595.backendstorage.grepolis_market", "706C"); Usuniêto : user_pref("CT2832595.backendstorage.toolbar_market", "706C"); Usuniêto : user_pref("CT2832595.backendstorage.toolbarurl", "687474703A2F2F746F6F6C6261722E696E6E6F67616D65732E[...] Usuniêto : user_pref("CT2832595.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Usuniêto : user_pref("CT2832595.homepageProtectorEnableByLogin", true); Usuniêto : user_pref("CT2832595.initDone", true); Usuniêto : user_pref("CT2832595.myStuffEnabled", true); Usuniêto : user_pref("CT2832595.myStuffPublihserMinWidth", 400); Usuniêto : user_pref("CT2832595.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Usuniêto : user_pref("CT2832595.myStuffServiceIntervalMM", 1440); Usuniêto : user_pref("CT2832595.myStuffServiceUrl", "hxxp://mystuff.conduit- services.com/MyStuffService.ashx?Co[...] Usuniêto : user_pref("CT2832595.revertSettingsEnabled", true); Usuniêto : user_pref("CT2832595.searchProtectorDialogDelayInSec", 10); Usuniêto : user_pref("CT2832595.searchProtectorEnableByLogin", true); Usuniêto : user_pref("CT2832595.testingCtid", ""); Usuniêto : user_pref("CT2832595.toolbarAppMetaDataLastCheckTime", "Wed Sep 12 2012 13:39:44 GMT+0200"); Usuniêto : user_pref("CT2832595.toolbarContextMenuLastCheckTime", "Tue Dec 14 2010 21:33:50 GMT+0100"); Usuniêto : user_pref("CT2832595.usagesFlag", 2); Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/r oot/CT2653012/CT2653012[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/r oot/CT2832595/CT2832595[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit- services.com/root/1045667/1041378/PL", "\"0\"[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit- services.com/root/1224658/1220331/PL", "\"0\"[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit- services.com/root/909619/905414/PL", "\"0\"")[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit- services.com/?ctid=CT2653012", [...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit- services.com/?ctid=CT2832595", [...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit- services.com/?name=GottenApps&lo[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit- services.com/?name=OtherApps&loc[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit- services.com/?name=SharedApps&lo[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit- services.com/?name=Toolbar&local[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit- services.com/DLG.pkg?ver=3.13[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit- services.com/DLG.pkg?ver=3.14[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit- services.com/DLG.pkg?ver=3.15[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit- services.com/Toolbar/?ownerId=CT2653012",[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit- services.com/Toolbar/?ownerId=CT2832595",[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit- services.com/toolbar/", "\"63433363123173[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit- services.com/?browser=FF&lut=0", "63[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit- services.com/?browser=FF&lut=11/8/20[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/r oot/CT2653012/CT2653012[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/r oot/CT2832595/CT2832595[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioS kins/Cornflower/equaliz[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioS kins/Cornflower/minimiz[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioS kins/Cornflower/play.gi[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioS kins/Cornflower/stop.gi[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioS kins/Cornflower/vol.gif[...] Usuniêto : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit- services.com/?locale=en", "\"018[...] Usuniêto : user_pref("CommunityToolbar.EngineOwner", ""); Usuniêto : user_pref("CommunityToolbar.EngineOwnerGuid", "{942cd1d4-9cc1- 4d31-876a-ea8f489f7a59}"); Usuniêto : user_pref("CommunityToolbar.EngineOwnerToolbarId", "innogames_international"); Usuniêto : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); Usuniêto : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2832595"); Usuniêto : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{942cd1d4- 9cc1-4d31-876a-ea8f489f7a59}"); Usuniêto : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "innogames_international"); Usuniêto : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://vshare.toolbarhome.com/search.asp[...] Usuniêto : user_pref("CommunityToolbar.ToolbarsList", "CT2832595,CT2653012"); Usuniêto : user_pref("CommunityToolbar.ToolbarsList2", "CT2832595,CT2653012"); Usuniêto : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440); Usuniêto : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Thu Jan 26 2012 09:22:44 GMT+0100"); Usuniêto : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); Usuniêto : user_pref("CommunityToolbar.alert.locale", "en"); Usuniêto : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); Usuniêto : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Thu Jan 26 2012 09:22:44 GMT+0100"); Usuniêto : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611"); Usuniêto : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); Usuniêto : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); Usuniêto : user_pref("CommunityToolbar.alert.showTrayIcon", false); Usuniêto : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); Usuniêto : user_pref("CommunityToolbar.alert.userId", "31982c82-5d57-421d- 952f-44f93a18706b"); Usuniêto : user_pref("CommunityToolbar.globalUserId", "0f6a629b-df00-4cbf- 87fa-b26f8e541c49"); Usuniêto : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2653012"); Usuniêto : user_pref("CommunityToolbar.killedEngine", true); Usuniêto : user_pref("CommunityToolbar.undefined", ""); Usuniêto : user_pref("extensions.vshare@toolbar.update.enabled", false); -\\ Google Chrome v24.0.1312.57 Plik : C:\Users\Mariusz\AppData\Local\Google\Chrome\User Data\Default\Preferences Usuniêto [l.38] : icon_url = "hxxp://www.ask.com/favicon.ico", Usuniêto [l.41] : keyword = "ask.com", Usuniêto [l.44] : search_url = "hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=ORJ&o=&locale=&apn_uid =C9[...] Usuniêto [l.45] : suggest_url = "hxxp://ss.websearch.ask.com/query?qsrc=2922&li=ff&sstype=prefix&q={searchTer ms[...] ************************* AdwCleaner[S1].txt - [25141 octets] - [20/02/2013 22:21:53] ########## EOF - C:\AdwCleaner[S1].txt - [25202 octets] ########## [i][size=85]Dodano Dzisiaj, 22:39:[/size][/i]

A to jest skan z OTL

Kod: Zaznacz wszystko: OTL logfile created on: 2013-02-20 22:31:07 - Run 2 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Mariusz\Downloads Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,96 Gb Total Physical Memory | 0,83 Gb Available Physical Memory | 42,39% Memory free 3,92 Gb Paging File | 2,54 Gb Available in Paging File | 64,81% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 58,50 Gb Total Space | 28,17 Gb Free Space | 48,15% Space Free | Partition Type: NTFS Drive D: | 173,20 Gb Total Space | 19,68 Gb Free Space | 11,36% Space Free | Partition Type: NTFS Computer Name: KOMPUTEREK | User Name: Mariusz | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2013-02-20 10:23:30 | 000,917,400 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2013-02-20 09:50:26 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Mariusz\Downloads\OTL.exe PRC - [2013-02-07 23:51:23 | 001,808,240 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_5_502_149.exe PRC - [2012-12-18 15:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2012-11-23 03:48:41 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2012-09-28 12:18:08 | 000,965,560 | ---- | M] (Samsung) -- C:\Program Files\Samsung\Kies\Kies.exe PRC - [2011-02-25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2010-08-12 13:16:26 | 000,810,144 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe PRC - [2010-08-12 13:16:12 | 002,215,064 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe PRC - [2010-04-26 16:39:55 | 000,716,344 | ---- | M] (Conexant Systems, Inc) -- C:\Program Files\CONEXANT\SAII\SmartAudio.exe PRC - [2010-01-19 10:44:40 | 000,536,576 | ---- | M] (Vimicro) -- C:\Program Files\USB Camera2\VM332_STI.EXE PRC - [2009-07-14 13:27:26 | 000,038,152 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe PRC - [2009-07-14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IgrsSvcs.exe PRC - [2007-04-27 19:40:14 | 001,581,056 | ---- | M] (Lenovo(beijing) Limited) -- C:\Program Files\Lenovo\EnergyCut\utilty.exe PRC - [2007-03-09 19:00:18 | 001,167,360 | ---- | M] (Lenovo (Beijing) Limited) -- C:\Program Files\Lenovo\EnergyCut\EnergyCut.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2013-02-20 10:23:21 | 003,067,288 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2013-02-16 04:56:48 | 000,240,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\78967b28f748b8807eaa97c1cb454adc\WindowsFormsIntegration.ni.dll MOD - [2013-02-16 04:55:27 | 001,670,144 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\7366a39c36523a084bc11c230929ff92\Microsoft.VisualBasic.ni.dll MOD - [2013-02-16 04:55:26 | 001,310,720 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\SmartAudio\05c7a1eaae22943bdb3b924eee27ab45\SmartAudio.ni.exe MOD - [2013-02-16 04:36:38 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\7ff638de44686eab4afaa8b3c8a9cfca\System.ServiceProcess.ni.dll MOD - [2013-02-16 04:36:14 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\cb562e2e4f74ae607f1186f6ec50cec7\System.Windows.Forms.ni.dll MOD - [2013-02-07 23:51:21 | 014,586,736 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_5_502_149.dll MOD - [2013-01-10 14:53:17 | 002,297,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\77dfcfed5fd5f67d0d3edc545935bb21\System.Core.ni.dll MOD - [2013-01-10 14:51:53 | 000,220,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\5baea82888a13fa558004b24e3b107cf\CustomMarshalers.ni.dll MOD - [2013-01-10 14:51:51 | 000,253,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Interop.CxHDAudioAP#\d36536c0e8836056532493d7a95fc1b7\Interop.CxHDAudioAPILib.ni.dll MOD - [2013-01-10 14:49:40 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\d7d20811a7ce7cc589153648cbb1ce5c\PresentationFramework.Aero.ni.dll MOD - [2013-01-10 14:49:17 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\90b89f6e8032310e9ac72a309fd49e83\System.Runtime.Remoting.ni.dll MOD - [2013-01-10 14:49:04 | 014,340,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\ff7c9a4f41f7cccc47e696c11b9f8469\PresentationFramework.ni.dll MOD - [2013-01-10 14:48:38 | 001,592,832 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\eead6629e384a5b69f9ae35284b7eeed\System.Drawing.ni.dll MOD - [2013-01-10 14:48:35 | 012,237,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\19b3d17c3ce0e264c4fb62028161adf7\PresentationCore.ni.dll MOD - [2013-01-10 14:48:21 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\cf827fe7bc99d9bcf0ba3621054ef527\WindowsBase.ni.dll MOD - [2013-01-10 14:48:15 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f687c43e9fdec031988b33ae722c4613\System.Xml.ni.dll MOD - [2013-01-10 14:48:11 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\195a77fcc6206f8bb35d419ff2cf0d72\System.Configuration.ni.dll MOD - [2013-01-10 14:48:10 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\369f8bdca364e2b4936d18dea582912c\System.ni.dll MOD - [2013-01-10 14:47:59 | 011,493,376 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7150b9136fad5b79e88f6c7f9d3d2c39\mscorlib.ni.dll MOD - [2012-09-28 10:07:06 | 012,784,640 | ---- | M] () -- C:\Program Files\Samsung\Kies\Theme\Kies.Theme.dll MOD - [2012-09-28 10:06:22 | 000,558,080 | ---- | M] () -- C:\Program Files\Samsung\Kies\Common\Kies.UI.dll MOD - [2012-09-28 10:06:10 | 000,034,816 | ---- | M] () -- C:\Program Files\Samsung\Kies\Common\Kies.Common.DeviceServiceLib.Interface.dll MOD - [2012-09-26 13:53:44 | 000,023,040 | ---- | M] () -- C:\Program Files\Samsung\Kies\MVVM\Kies.MVVM.dll MOD - [2012-09-26 12:57:26 | 000,057,856 | ---- | M] () -- C:\Program Files\Samsung\Kies\External\MediaModules\ASF_cSharpAPI.dll MOD - [2010-11-05 02:57:39 | 000,069,120 | ---- | M] () -- C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll MOD - [2009-07-14 09:07:16 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_pl_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll MOD - [2009-07-14 09:07:14 | 000,167,936 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Xml.resources\2.0.0.0_pl_b77a5c561934e089\System.Xml.resources.dll MOD - [2007-04-13 20:18:10 | 000,057,344 | ---- | M] () -- C:\Program Files\Lenovo\EnergyCut\KbdHook.dll MOD - [2005-06-24 19:05:02 | 000,045,056 | ---- | M] () -- C:\Program Files\Lenovo\EnergyCut\HookLib.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - [2013-02-20 10:23:28 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2013-02-07 23:51:25 | 000,251,248 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012-12-18 15:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2010-10-12 11:25:17 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc) SRV - [2010-08-12 13:18:40 | 000,033,584 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv) SRV - [2010-08-12 13:16:26 | 000,810,144 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn) SRV - [2009-07-28 13:41:06 | 000,472,328 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe -- (Lenovo ReadyComm ConnSvc) SRV - [2009-07-28 13:41:04 | 000,414,984 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files\Lenovo\ReadyComm\AppSvc.exe -- (Lenovo ReadyComm AppSvc) SRV - [2009-07-16 02:12:42 | 000,276,296 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files\Lenovo\ReadyComm\PS_MDP.dll -- (PS_MDP) SRV - [2009-07-14 13:27:26 | 000,038,152 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe -- (IGRS) SRV - [2009-07-14 13:27:20 | 000,103,688 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\ReadyComm\common\router.dll -- (ReadyComm.DirectRouter) SRV - [2009-07-14 02:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc) SRV - [2009-07-14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009-07-14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2009-07-14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | Disabled | Stopped] -- System32\Drivers\sptd.sys -- (sptd) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Mariusz\AppData\Local\Temp\catchme.sys -- (catchme) DRV - [2012-08-23 15:44:32 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV - [2012-08-23 15:40:25 | 000,049,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV - [2012-06-27 09:37:56 | 000,136,808 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdm.sys -- (ssadmdm) DRV - [2012-06-27 09:37:56 | 000,123,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_mdm.sys -- (ss_mdm) DRV - [2012-06-27 09:37:56 | 000,121,064 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadbus.sys -- (ssadbus) DRV - [2012-06-27 09:37:56 | 000,114,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadserd.sys -- (ssadserd) DRV - [2012-06-27 09:37:56 | 000,098,560 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bus.sys -- (ss_bus) DRV - [2012-06-27 09:37:56 | 000,014,848 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_mdfl.sys -- (ss_mdfl) DRV - [2012-06-27 09:37:56 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdfl.sys -- (ssadmdfl) DRV - [2012-03-30 18:31:52 | 000,271,360 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt) DRV - [2011-05-09 16:58:11 | 000,018,048 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt) DRV - [2010-11-20 13:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus) DRV - [2010-11-20 13:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt) DRV - [2010-11-20 13:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc) DRV - [2010-11-20 10:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb) DRV - [2010-11-20 10:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID) DRV - [2010-11-20 10:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap) DRV - [2010-10-02 20:21:51 | 000,054,800 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\funfrm.sys -- (funfrm) DRV - [2010-07-29 12:31:26 | 000,136,632 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\System32\drivers\eamonm.sys -- (eamonm) DRV - [2010-07-29 12:31:26 | 000,115,008 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\ehdrv.sys -- (ehdrv) DRV - [2010-07-29 12:31:26 | 000,096,920 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\epfwwfpr.sys -- (epfwwfpr) DRV - [2010-04-26 16:39:55 | 000,517,688 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CHDRT32.sys -- (CnxtHdAudService) DRV - [2010-04-26 16:26:25 | 000,218,744 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService) DRV - [2010-04-20 17:45:28 | 000,198,000 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vm332avs.sys -- (vm332avs) DRV - [2010-01-20 06:14:42 | 000,023,136 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AcpiVpc.sys -- (ACPIVPC) DRV - [2009-07-28 20:09:38 | 000,063,240 | ---- | M] (Lenovo) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wdbridge.sys -- (Bridge0) DRV - [2009-07-16 11:37:14 | 000,011,792 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WDMirror.sys -- (wdmirror) DRV - [2009-07-14 00:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp) DRV - [2009-03-18 16:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://domredi.com/1/ IE - HKCU\..\SearchScopes,DefaultScope = IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1:9421;<local> [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "" FF - prefs.js..browser.search.defaultenginename: "" FF - prefs.js..browser.search.defaultthis.engineName: "" FF - prefs.js..browser.search.defaulturl: "" FF - prefs.js..browser.search.order.1: "" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledAddons: player%40vividas.com:4.1.3 FF - prefs.js..extensions.enabledAddons: %7Be4a8a97b-f2ed-450b-b12d-ee082ba24781%7D:1.7.1 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:19.0 FF - prefs.js..extensions.enabledItems: {942cd1d4-9cc1-4d31-876a-ea8f489f7a59}:3.2.5.2 FF - prefs.js..extensions.enabledItems: {cd90bf73-20f6-44ef-993d-bb920303bd2e}:2.7.1.3 FF - prefs.js..extensions.enabledItems: {000F1EA4-5E08-4564-A29B-29076F63A37A}:1.0.3.151 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26 FF - prefs.js..extensions.enabledItems: {4ac04d99-3f4b-4ec5-bd2d-216d59822f8a}:1.1 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}:6.0.31 FF - prefs.js..extensions.enabledItems: player@vividas.com:4.1.3 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_149.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0: C:\Program Files\Ganymede\Plugins\npganymedenet.dll ( ) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.13.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.13.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@soe.sony.com/installer,version=1.0.3: C:\Users\Mariusz\AppData\Roaming\Mozilla\Firefox\Profiles\2zh919ph.default\extensions\{000F1EA4-5E08-4564-A29B-29076F63A37A}\plugins\npsoe.dll () FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Mariusz\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Mariusz\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013-02-20 10:23:32 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013-02-20 22:23:22 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2010-10-02 19:32:02 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 19.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013-02-20 10:23:32 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 19.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013-02-20 22:23:22 | 000,000,000 | ---D | M] [2010-10-02 19:37:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mariusz\AppData\Roaming\mozilla\Extensions [2013-02-20 22:09:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mariusz\AppData\Roaming\mozilla\Firefox\Profiles\2zh919ph.default\extensions [2011-03-30 19:21:31 | 000,000,000 | ---D | M] () -- C:\Users\Mariusz\AppData\Roaming\mozilla\Firefox\Profiles\2zh919ph.default\extensions\{000F1EA4-5E08-4564-A29B-29076F63A37A} [2012-12-20 19:01:51 | 000,000,000 | ---D | M] (Vividas player plugin) -- C:\Users\Mariusz\AppData\Roaming\mozilla\Firefox\Profiles\2zh919ph.default\extensions\player@vividas.com [2013-01-27 11:38:55 | 000,242,136 | ---- | M] () (No name found) -- C:\Users\Mariusz\AppData\Roaming\mozilla\firefox\profiles\2zh919ph.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2013-02-20 10:22:16 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2013-02-20 10:23:31 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2012-06-20 12:54:22 | 000,121,024 | ---- | M] ( ) -- C:\Program Files\mozilla firefox\plugins\npganymedenet.dll [2013-02-20 10:23:10 | 000,002,980 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2013-02-20 10:23:10 | 000,001,619 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2013-02-20 10:23:10 | 000,001,130 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2013-02-20 10:23:10 | 000,001,071 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2013-02-20 10:23:10 | 000,001,396 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2013-02-20 10:23:10 | 000,001,896 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - homepage: CHR - default_search_provider: Ask (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding} CHR - default_search_provider: suggest_url = CHR - homepage: CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Mariusz\AppData\Local\Google\Chrome\Application\24.0.1312.57\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Mariusz\AppData\Local\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Mariusz\AppData\Local\Google\Chrome\Application\24.0.1312.57\pdf.dll CHR - plugin: Google Update (Enabled) = C:\Users\Mariusz\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll CHR - plugin: SOE Web Installer (Enabled) = C:\Users\Mariusz\AppData\Roaming\Mozilla\Firefox\Profiles\2zh919ph.default\extensions\{000F1EA4-5E08-4564-A29B-29076F63A37A}\plugins\npsoe.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: Grepolis Report Converter = C:\Users\Mariusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdiagfgmohfbblklemkkgcamcpmmpiba\2.0.2_0\ O1 HOSTS File: ([2012-11-17 12:42:52 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O4 - HKLM..\Run: [332BigDog] C:\Program Files\USB Camera2\VM332_STI.EXE (Vimicro) O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET) O4 - HKLM..\Run: [EnergyCut] C:\Program Files\Lenovo\EnergyCut\EnergyCut.exe (Lenovo (Beijing) Limited) O4 - HKLM..\Run: [EnergyUtility] C:\Program Files\Lenovo\EnergyCut\utilty.exe (Lenovo(beijing) Limited) O4 - HKLM..\Run: [ROC_roc_ssl_v12] "C:\Program Files\AVG Secure Search\ROC_roc_ssl_v12.exe" / /PROMPT /CMPID=roc_ssl_v12 File not found O4 - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe () O4 - HKCU..\Run: [] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (Samsung) O4 - HKCU..\Run: [Akamai NetSession Interface] "C:\Users\Mariusz\AppData\Local\Akamai\netsession_win.exe" File not found O4 - HKCU..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe () O4 - HKCU..\Run: [KiesPreload] C:\Program Files\Samsung\Kies\Kies.exe (Samsung) O4 - HKCU..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites) O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites) O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites) O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9019FB73-E538-492A-A536-37AD3D041738}: DhcpNameServer = 8.8.8.8 8.8.4.4 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2013-02-20 22:09:29 | 000,000,000 | ---D | C] -- C:\_OTL [2013-02-20 10:22:14 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2013-02-20 09:30:51 | 000,000,000 | ---D | C] -- C:\32788R22FWJFW [2013-02-15 23:32:06 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2013-02-15 23:32:05 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2013-02-15 23:32:05 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2013-02-15 23:32:04 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2013-02-15 23:32:04 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2013-02-15 23:32:02 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2013-02-15 23:32:02 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2013-02-15 23:32:00 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2013-02-15 17:55:48 | 002,347,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2013-02-15 17:55:29 | 003,967,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2013-02-15 17:55:27 | 003,913,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2013-02-15 17:55:24 | 000,187,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS [2013-02-15 17:55:21 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll [2013-02-07 16:42:59 | 000,262,560 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe [2013-02-07 16:42:37 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe [2013-02-07 16:42:37 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe [2013-02-07 16:42:37 | 000,094,112 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll [2013-02-07 16:42:19 | 000,000,000 | ---D | C] -- C:\Program Files\Java [2013-02-06 21:39:39 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\CrashDump [2013-01-22 14:36:13 | 000,000,000 | ---D | C] -- C:\Users\Mariusz\AppData\Roaming\DivX [2013-01-22 14:29:05 | 000,000,000 | ---D | C] -- C:\Program Files\DivX [2013-01-22 14:27:43 | 000,000,000 | ---D | C] -- C:\ProgramData\DivX [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2013-02-20 22:32:23 | 000,015,040 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013-02-20 22:32:23 | 000,015,040 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013-02-20 22:25:01 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013-02-20 22:24:55 | 1579,622,400 | -HS- | M] () -- C:\hiberfil.sys [2013-02-20 22:22:00 | 000,001,066 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1398826653-280620893-4223977617-1000UA.job [2013-02-20 21:51:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013-02-18 19:22:01 | 000,001,014 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1398826653-280620893-4223977617-1000Core.job [2013-02-17 17:04:48 | 000,241,330 | ---- | M] () -- C:\Users\Mariusz\Desktop\btech_bru_3l.pdf [2013-02-16 04:35:35 | 000,412,088 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2013-02-15 23:30:32 | 000,697,912 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2013-02-15 23:30:32 | 000,616,008 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2013-02-15 23:30:32 | 000,134,990 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2013-02-15 23:30:32 | 000,106,388 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2013-02-07 23:51:23 | 000,697,712 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2013-02-07 23:51:23 | 000,074,096 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [2013-02-07 16:42:32 | 000,094,112 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll [2013-02-07 16:42:27 | 000,262,560 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe [2013-02-07 16:42:27 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe [2013-02-07 16:42:26 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe [2013-02-07 16:42:25 | 000,861,088 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\npdeployJava1.dll [2013-02-07 16:42:25 | 000,782,240 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll [color=#E56717]========== Files Created - No Company Name ==========[/color] [2013-02-17 17:04:48 | 000,241,330 | ---- | C] () -- C:\Users\Mariusz\Desktop\btech_bru_3l.pdf [2012-11-23 23:01:04 | 000,007,597 | ---- | C] () -- C:\Users\Mariusz\AppData\Local\Resmon.ResmonCfg [2012-11-17 12:33:39 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe [2012-11-17 12:33:39 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe [2012-11-17 12:33:39 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2012-11-17 12:33:39 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2012-11-17 12:33:39 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2012-06-26 15:02:40 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe [2012-06-26 15:02:38 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll [2012-06-26 15:02:38 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll [2012-06-26 15:02:38 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll [2012-06-26 15:02:38 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll [2012-04-04 13:54:44 | 000,000,001 | ---- | C] () -- C:\Windows\System32\SI.bin [2011-06-23 13:59:22 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe [2011-06-10 06:34:52 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll [2011-05-09 16:58:22 | 000,271,360 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys [2011-05-09 16:58:11 | 000,018,048 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012-06-09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009-07-14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2013-02-20 21:52:50 | 000,000,000 | ---D | M] -- C:\Users\Mariusz\AppData\Roaming\AIMP [2013-02-11 23:00:28 | 000,000,000 | ---D | M] -- C:\Users\Mariusz\AppData\Roaming\BESTplayer [2011-01-02 20:34:39 | 000,000,000 | ---D | M] -- C:\Users\Mariusz\AppData\Roaming\DAEMON Tools Lite [2010-10-02 20:25:13 | 000,000,000 | ---D | M] -- C:\Users\Mariusz\AppData\Roaming\EasyCapture [2011-12-16 22:23:26 | 000,000,000 | ---D | M] -- C:\Users\Mariusz\AppData\Roaming\Gadu-Gadu 10 [2012-09-21 19:25:53 | 000,000,000 | ---D | M] -- C:\Users\Mariusz\AppData\Roaming\GanymedeNet [2010-12-26 17:08:55 | 000,000,000 | ---D | M] -- C:\Users\Mariusz\AppData\Roaming\ipla [2012-11-23 08:13:06 | 000,000,000 | ---D | M] -- C:\Users\Mariusz\AppData\Roaming\iShell [2011-01-21 19:41:24 | 000,000,000 | ---D | M] -- C:\Users\Mariusz\AppData\Roaming\Leadertech [2010-10-02 20:23:17 | 000,000,000 | ---D | M] -- C:\Users\Mariusz\AppData\Roaming\Lenovo [2010-10-06 12:52:15 | 000,000,000 | ---D | M] -- C:\Users\Mariusz\AppData\Roaming\Nowe Gadu-Gadu [2010-12-19 15:35:09 | 000,000,000 | ---D | M] -- C:\Users\Mariusz\AppData\Roaming\OpenFM [2010-12-19 01:56:33 | 000,000,000 | ---D | M] -- C:\Users\Mariusz\AppData\Roaming\RDRM [2012-10-24 20:22:24 | 000,000,000 | ---D | M] -- C:\Users\Mariusz\AppData\Roaming\Samsung [2011-05-23 00:08:21 | 000,000,000 | ---D | M] -- C:\Users\Mariusz\AppData\Roaming\uTorrent [color=#E56717]========== Purity Check ==========[/color] < End of report >