bardzo wolny komputer

**Posty:** 350 · przez **twoja mama** 20 Maj 2008, 21:22

Witam.

Moja siostra ma problem z laptopem. Bardzo wolno jej się ładuje system (około 10 minut), wszystko wolno się otwiera, muzyka się przerywa. Logi:

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:33:53, on 19/05/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16640) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\btbb_wcm\McciTrayApp.exe C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe C:\WINDOWS\system32\RunDLL32.exe C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe C:\PROGRA~1\Yahoo!\browser\ycommon.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\HPQ\shared\hpqwmi.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Java\jre1.6.0_03\bin\jucheck.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/customize/btyahoo/defaults/sb/*http://uk.docs.yahoo.com/info/bt_side.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;2 R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [btbb_wcm_McciTrayApp] C:\Program Files\btbb_wcm\McciTrayApp.exe O4 - HKLM\..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe O4 - HKLM\..\Run: [PD0620 STISvc] RunDLL32.exe P0620Pin.dll,RunDLL32EP 513 O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe O4 - HKLM\..\Run: [ZangoOE] C:\Program Files\Zango\bin\10.1.181.0\OEAddOn.exe O4 - HKLM\..\Run: [ZangoSA] "C:\Program Files\Zango\bin\10.1.181.0\ZangoSA.exe" O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: CD-MENU.LNK = D:\MENU.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: BT Broadband Desktop Help.lnk = C:\Program Files\BT Home Hub\Help\bin\matcli.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZK O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/229?329776e7e2ef4040a756216bbaa8760d O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/230?329776e7e2ef4040a756216bbaa8760d O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: BT Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\common\yinsthelper.dll O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\shared\hpqwmi.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\system32\YPCSER~1.EXE -- End of file - 12168 bytes

[code]ComboFix 08-05-19.1 - new 2008-05-19 21:57:44.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.464 [GMT 1:00]
Running from: C:\Documents and Settings\new\Desktop\ComboFix.exe
* Created a new restore point

[color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color]
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Application Data\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
C:\Documents and Settings\All Users\Application Data\ZangoSA
C:\Documents and Settings\new\Application Data\FunWebProducts
C:\Documents and Settings\new\Application Data\WeatherDPA
C:\Documents and Settings\new\Application Data\Zango
C:\Documents and Settings\new\Application Data\Zango\eskin\[u]0[/u]40107ta292_arrow.ani
C:\Documents and Settings\new\Application Data\Zango\eskin\[u]0[/u]40107ta292_cr.htm
C:\Documents and Settings\new\Application Data\Zango\eskin\[u]0[/u]40107ta292_prv.gif
C:\Documents and Settings\new\Application Data\Zango\eskin\[u]0[/u]40107ta318_arrow.ani
C:\Documents and Settings\new\Application Data\Zango\eskin\[u]0[/u]40107ta318_cr.htm
C:\Documents and Settings\new\Application Data\Zango\eskin\[u]0[/u]40107ta318_prv.gif
C:\Documents and Settings\new\Application Data\Zango\eskin\FileManager.txt
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]30104_emte10_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]30104_emte11_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]30104_emte12_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]30104_emte13_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]30104_emte14_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]30104_emte19_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]30104_emte20_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]30104_emte21_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]30104_emte9_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]30203lib_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]33102angel_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]33102bigluf_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]33102bigsmile_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]33102birthday_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]33102cheers_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]33102flo_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]33102good_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]33102jump_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]33102king_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]33102lough_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]33102luf_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]33102smile_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]33102smiled_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]33102sor_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]33102thanx_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]33102uhu_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]40103ahh_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]40103wow_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]40104_emi2_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]42102_1134_112_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]50103big_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]50103gig_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]50103hm_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]50103nomail_emoti_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]50103norm_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]60104_ema15_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]60104_ema16_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]60104_ema17_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]60104_ema18_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]60104_ema19_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]60104_ema20_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]60104_ema21_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]60104_ema24_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]60104_ema25_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]60104_ema26_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]60104_ema30_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]60104_ema33_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]60104_ema34_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]62802hippi_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]62802jumpie_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]80402argh_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]80402oops_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]80402ouch_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]82502no_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\[u]0[/u]82502yes_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\110103_boring1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\110103_confused_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\110103_crying_ugly_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\110103_fantastic_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\110103_feel_better_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\110103_gimme_break_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\110103_heehee_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\110103_hlopaet_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\110103_ign_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\110103_lol_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\110103_no_comment_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\110103_peace_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\110103_smashing_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\110103_talk2thehand_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\block_sm.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\block_sm2.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\block_smli.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\block_smli2.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\blocked.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\blocked2.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\btn_add-but.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\btn_back-but.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\btn_left_cut_enabled_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\btn_left_enabled_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\btn_left_pressed_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\btn_middle_enabled_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\btn_middle_pressed_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\btn_right_cut_enabled_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\btn_right_enabled_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\btn_right_pressed_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\business_promo.htm
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\buttondir.txt
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\components.cdf
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\css_cattree.css
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\css_flashpreview.css
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\css2_main.css
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\css2_pagingmodule.css
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\css2_topbuttons.css
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\cursors.res
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\delete.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\edit_clear_sound.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\edit_fs.htm
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\edit_select.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-511724-543450.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-511724-548964.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-511724-589306.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-511724-591943.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-511724-592579.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-511724-598579.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-511724-603763.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-511724-9595.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-511724-9696.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-511745-514279.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-backgrounds.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-bcards.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-ecards.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-emoticons.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-estationery.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-funny.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-help.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-images.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-info.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-more.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-my.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-new.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-new2.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-options.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-people.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-photo.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-tell.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-temp.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-text.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-voice.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-def.cdf
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-premium-email-premium.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-t1-bg.res
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\email-temp-bg.res
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\estatationery.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\flashpatch.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\flashpreview.htm
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\fs3.htm
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\hotbar_promo.htm
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\icon_checked_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\icon_close_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\icon_close_pressed_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\icon_edit_preview.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\icon_edit_send.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\icon_flash_preview.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\icon_recently_used.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\icon_remove_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\icon_remove_pressed_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\icon_sand-clock2.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\icon_tell_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\icon_tell_pressed_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\icon_tree_null.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\icon_unchecked_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\icon_unchecked_pressed_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\img_barlayout.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\img_barlayout2.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\img_barlayout4.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\img_corner_left.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\img_local_logo.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\js2_basetemplate.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\js2_hbgroups.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\js2_hbobject3.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\js2_hbobjectset3.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\js2_hotbarwrapper.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\js2_iteratorsandreaders3nf.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\js2_pagingmoduleobj3.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\js2_texts3.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\js2_xmltree3nf.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\layout.cdf
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\linkpathlegal.txt
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\n.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\nav_b_2.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\nav_bb_2.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\nav_f_2.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\nav_ff_2.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\progress.res
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\sales_buttons.res
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\searchbtn.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\submit.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\tab_bg.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\tab_bga.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\tab_bgia.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\tab_l.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\tab_la.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\tab_lia.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\tab_r.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\tab_ra.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\tab_ria.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\tree_dots.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\tree_minus.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\tree_plus.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\treedata_animations.xml
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\treedata_backgrounds.xml
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\treedata_ecards.xml
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\treedata_emoticons.xml
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\treedata_notifiers.xml
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\treedata_text.xml
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\1\zango_btn.res
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]30104_emte10_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]30104_emte11_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]30104_emte12_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]30104_emte13_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]30104_emte14_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]30104_emte19_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]30104_emte20_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]30104_emte21_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]30104_emte9_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]30203lib_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]33102angel_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]33102bigluf_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]33102bigsmile_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]33102birthday_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]33102cheers_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]33102flo_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]33102good_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]33102jump_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]33102king_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]33102lough_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]33102luf_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]33102smile_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]33102smiled_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]33102sor_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]33102thanx_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]33102uhu_1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]40103ahh_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]40103wow_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]40104_emi2_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]42102_1134_112_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]50103big_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]50103gig_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]50103hm_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]50103nomail_emoti_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]50103norm_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]60104_ema15_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]60104_ema16_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]60104_ema17_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]60104_ema18_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]60104_ema19_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]60104_ema20_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]60104_ema21_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]60104_ema24_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]60104_ema25_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]60104_ema26_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]60104_ema30_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]60104_ema33_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]60104_ema34_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]62802hippi_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]62802jumpie_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]80402argh_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]80402oops_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]80402ouch_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]82502no_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\[u]0[/u]82502yes_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\110103_boring1_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\110103_confused_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\110103_crying_ugly_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\110103_fantastic_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\110103_feel_better_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\110103_gimme_break_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\110103_heehee_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\110103_hlopaet_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\110103_ign_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\110103_lol_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\110103_no_comment_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\110103_peace_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\110103_smashing_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\110103_talk2thehand_prv.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\block_sm.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\block_sm2.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\block_smli.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\block_smli2.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\blocked.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\blocked2.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\btn_add-but.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\btn_back-but.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\btn_left_cut_enabled_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\btn_left_enabled_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\btn_left_pressed_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\btn_middle_enabled_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\btn_middle_pressed_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\btn_right_cut_enabled_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\btn_right_enabled_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\btn_right_pressed_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\business_promo.htm
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\buttondir.txt
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\components.cdf
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\css_cattree.css
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\css_flashpreview.css
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\css2_main.css
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\css2_pagingmodule.css
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\css2_topbuttons.css
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\cursors.res
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\delete.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\edit_clear_sound.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\edit_fs.htm
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\edit_select.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-511724-543450.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-511724-548964.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-511724-589306.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-511724-591943.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-511724-592579.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-511724-598579.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-511724-603763.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-511724-9595.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-511724-9696.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-511745-514279.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-backgrounds.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-bcards.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-ecards.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-emoticons.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-estationery.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-funny.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-help.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-images.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-info.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-more.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-my.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-new.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-new2.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-options.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-people.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-photo.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-tell.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-temp.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-text.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def-email-voice.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-def.cdf
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-premium-email-premium.mnu
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-t1-bg.res
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\email-temp-bg.res
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\estatationery.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\flashpatch.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\flashpreview.htm
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\fs3.htm
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\hotbar_promo.htm
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\icon_checked_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\icon_close_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\icon_close_pressed_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\icon_edit_preview.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\icon_edit_send.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\icon_flash_preview.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\icon_recently_used.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\icon_remove_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\icon_remove_pressed_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\icon_sand-clock2.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\icon_tell_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\icon_tell_pressed_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\icon_tree_null.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\icon_unchecked_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\icon_unchecked_pressed_1.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\img_barlayout.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\img_barlayout2.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\img_barlayout4.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\img_corner_left.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\img_local_logo.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\js2_basetemplate.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\js2_hbgroups.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\js2_hbobject3.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\js2_hbobjectset3.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\js2_hotbarwrapper.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\js2_iteratorsandreaders3nf.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\js2_pagingmoduleobj3.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\js2_texts3.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\js2_xmltree3nf.js
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\layout.cdf
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\linkpathlegal.txt
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\n.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\nav_b_2.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\nav_bb_2.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\nav_f_2.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\nav_ff_2.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\progress.res
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\sales_buttons.res
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\searchbtn.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\submit.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\tab_bg.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\tab_bga.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\tab_bgia.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\tab_l.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\tab_la.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\tab_lia.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\tab_r.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\tab_ra.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\tab_ria.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\tree_dots.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\tree_minus.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\tree_plus.gif
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\treedata_animations.xml
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\treedata_backgrounds.xml
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\treedata_ecards.xml
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\treedata_emoticons.xml
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\treedata_notifiers.xml
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\treedata_text.xml
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\2\zango_btn.res
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\DownLoad\business_promo.xip
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\DownLoad\buttondir.xip
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\DownLoad\code.xip
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\DownLoad\cursors.xip
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\DownLoad\email-def.xip
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\DownLoad\email-t1-bg.xip
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\DownLoad\email-temp-bg.xip
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\DownLoad\hotbar_promo.xip
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\DownLoad\images.xip
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\DownLoad\layout.xip
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\DownLoad\linkpathlegal.xip
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\DownLoad\localcontent.xip
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\DownLoad\progress.xip
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\DownLoad\sales_buttons.xip
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\DownLoad\treexml.xip
C:\Documents and Settings\new\Application Data\Zango\v3.0\HostWD\static\DownLoad\zango_btn.xip
C:\Documents and Settings\new\Application Data\Zango\v3.0\Zango\static\DownLoad\samplegroups2.txt
C:\Documents and Settings\new\Application Data\Zango\v3.0\Zango\static\DownLoad\samplegroups2.xip
C:\Program Files\FunWebProducts
C:\Program Files\FunWebProducts\ScreenSaver\Cache\[u]0[/u]052EFEF.jpg
C:\Program Files\FunWebProducts\ScreenSaver\Cache\files.ini
C:\Program Files\FunWebProducts\ScreenSaver\Images\[u]0[/u]05003F2.urr
C:\Program Files\FunWebProducts\ScreenSaver\Images\[u]0[/u]052EF23.urr
C:\Program Files\FunWebProducts\ScreenSaver\Images\[u]0[/u]056AF39.dat
C:\Program Files\FunWebProducts\ScreenSaver\Images\f3wallpp.bmp
C:\Program Files\FunWebProducts\ScreenSaver\Images\wrkparam.lst
C:\Program Files\FunWebProducts\Shared\Cache\AvatarSmallBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\FunBuddyIconBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\MailStampBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\MyFunCardsIMBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\MyStationeryBtn.htmlx
C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\WebfettiBtn.html
C:\Program Files\internet explorer\msimg32.dll
C:\Program Files\myglobalsearch
C:\Program Files\myglobalsearch\bar\1.bin\M9FFXTBR.JAR
C:\Program Files\myglobalsearch\bar\1.bin\M9FFXTBR.MANIFEST
C:\Program Files\myglobalsearch\bar\1.bin\M9NTSTBR.JAR
C:\Program Files\myglobalsearch\bar\1.bin\M9NTSTBR.MANIFEST
C:\Program Files\myglobalsearch\bar\1.bin\M9PLUGIN.DLL
C:\Program Files\myglobalsearch\bar\1.bin\NPMYGLSH.DLL
C:\Program Files\myglobalsearch\bar\Cache\[u]0[/u]029A6B8.bin
C:\Program Files\myglobalsearch\bar\Cache\[u]0[/u]029A948.bin
C:\Program Files\myglobalsearch\bar\Cache\[u]0[/u]029AB9A.bin
C:\Program Files\myglobalsearch\bar\Cache\[u]0[/u]0CE18BE
C:\Program Files\myglobalsearch\bar\Cache\[u]0[/u]4C5CFEF
C:\Program Files\myglobalsearch\bar\Cache\files.ini
C:\Program Files\myglobalsearch\bar\History\search
C:\Program Files\myglobalsearch\bar\Settings\prevcfg.htm
C:\Program Files\MyWebSearch
C:\Program Files\MyWebSearch\bar\1.bin\F3BKGERR.JPG
C:\Program Files\MyWebSearch\bar\1.bin\F3BROVLY.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3CJPEG.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3DTACTL.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3HISTSW.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3HTTPCT.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3IMSTUB.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR
C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.EXE
C:\Program Files\MyWebSearch\bar\1.bin\F3SCRCTR.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3SHLLVW.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3SPACER.WMV
C:\Program Files\MyWebSearch\bar\1.bin\F3WALLPP.DAT
C:\Program Files\MyWebSearch\bar\1.bin\F3WPHOOK.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.JAR
C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.MANIFEST
C:\Program Files\MyWebSearch\bar\1.bin\M3HTML.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3IDLE.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3IMPIPE.EXE
C:\Program Files\MyWebSearch\bar\1.bin\M3MSG.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.JAR
C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.MANIFEST
C:\Program Files\MyWebSearch\bar\1.bin\M3OUTLCN.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3SKIN.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3SKPLAY.EXE
C:\Program Files\MyWebSearch\bar\1.bin\M3SLSRCH.EXE
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL
C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL
C:\Program Files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL
C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S
C:\Program Files\MyWebSearch\bar\Cache\[u]0[/u]00FC654
C:\Program Files\MyWebSearch\bar\Cache\[u]0[/u]00FD652.bin
C:\Program Files\MyWebSearch\bar\Cache\[u]0[/u]00FD8A4.bin
C:\Program Files\MyWebSearch\bar\Cache\[u]0[/u]00FDAC6.bin
C:\Program Files\MyWebSearch\bar\Cache\[u]0[/u]00FDC6C.bin
C:\Program Files\MyWebSearch\bar\Cache\[u]0[/u]00FDDF3.bin
C:\Program Files\MyWebSearch\bar\Cache\[u]0[/u]0122E7A.bin
C:\Program Files\MyWebSearch\bar\Cache\[u]0[/u]01230CC.bin
C:\Program Files\MyWebSearch\bar\Cache\[u]0[/u]012334D.bin
C:\Program Files\MyWebSearch\bar\Cache\[u]0[/u]012406C.bin
C:\Program Files\MyWebSearch\bar\Cache\[u]0[/u]0124DBA.bin
C:\Program Files\MyWebSearch\bar\Cache\[u]0[/u]104ECEF
C:\Program Files\MyWebSearch\bar\Cache\files.ini
C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S
C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S
C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S
C:\Program Files\MyWebSearch\bar\History\search2
C:\Program Files\MyWebSearch\bar\icons\CM.ICO
C:\Program Files\MyWebSearch\bar\icons\MFC.ICO
C:\Program Files\MyWebSearch\bar\icons\PSS.ICO
C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO
C:\Program Files\MyWebSearch\bar\icons\WB.ICO
C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO
C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S
C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S
C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S
C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S
C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S

**Posty:** 18165 · przez **wojtas** 20 Maj 2008, 21:26

O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Run: [ZangoOE] C:\Program Files\Zango\bin\10.1.181.0\OEAddOn.exe
O4 - HKLM\..\Run: [ZangoSA] "C:\Program Files\Zango\bin\10.1.181.0\ZangoSA.exe"
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZK

skasuj

i wrzuc log z combofixa na jakis serwer np. www.sendspace.pl

**Posty:** 350 · przez **twoja mama** 20 Maj 2008, 21:31

http://www.sendspace.pl/file/3s8uGUKq/

**Posty:** 18165 · przez **wojtas** 20 Maj 2008, 21:44

wklej do notatnika:

Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f9f8d9d0-0085-11dd-af9f-0014a57351d2}]

w notatniku u góry>>>plik zapisz jako>>>Zmien rozszerzenie z TXT na Wszystkie pliki *.* >>> Zapisz pod nazwą FIX.REG

Klikasz dwa razy na powstały plik fix i dodajesz go do rejestru....

i wróć z dwoma nowymi logami

**Posty:** 350 · przez **twoja mama** 20 Maj 2008, 22:11

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:56:36, on 20/05/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16640) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe C:\Program Files\btbb_wcm\McciTrayApp.exe C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe C:\WINDOWS\system32\RunDLL32.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe C:\Program Files\Winamp Remote\bin\OrbTray.exe C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe C:\PROGRA~1\Yahoo!\browser\ycommon.exe C:\Program Files\BT Home Hub\Help\bin\mpbtn.exe C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\HPQ\shared\hpqwmi.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Java\jre1.6.0_03\bin\jucheck.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/customize/btyahoo/defaults/sb/*http://uk.docs.yahoo.com/info/bt_side.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;2 R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (file missing) R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll (file missing) O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll (file missing) O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll (file missing) O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll (file missing) O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (file missing) O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [btbb_wcm_McciTrayApp] C:\Program Files\btbb_wcm\McciTrayApp.exe O4 - HKLM\..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe O4 - HKLM\..\Run: [PD0620 STISvc] RunDLL32.exe P0620Pin.dll,RunDLL32EP 513 O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: CD-MENU.LNK = D:\MENU.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: BT Broadband Desktop Help.lnk = C:\Program Files\BT Home Hub\Help\bin\matcli.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/229?329776e7e2ef4040a756216bbaa8760d O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/230?329776e7e2ef4040a756216bbaa8760d O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll (file missing) O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll (file missing) O9 - Extra button: BT Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\WINDOWS\system32\shdocvw.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL (file missing) O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\common\yinsthelper.dll O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\shared\hpqwmi.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\system32\YPCSER~1.EXE -- End of file - 9877 bytes

http://www.sendspace.pl/file/F4GpdvYY/

Laptop trochę szybciej się włączył ale muzyka dalej przerywa..

**Posty:** 18165 · przez **wojtas** 20 Maj 2008, 22:25

skasuj to:;

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;2
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (file missing)
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll (file missing)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll (file missing)
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (file missing)
O4 - HKLM\..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background

wklej do notatnika

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{E1BACF55-35E1-4E47-9247-2D48660E5545}"=-

w notatniku u góry>>>plik zapisz jako>>>Zmien rozszerzenie z TXT na Wszystkie pliki *.* >>> Zapisz pod nazwą FIX.REG

Klikasz dwa razy na powstały plik fix i dodajesz go do rejestru....

Klikasz prawym przyciskiem myszy na Mój komputer => Właściwości => Sprzęt => Menadżer urządzeń => Kontrolery IDE ATA/ATAPI => Podstawowy kanał IDE => Ustawienia zaawansowane i sprawdź czy dysk pracuje w trybie PIO czy DMA. Sprawdz tez w pomocniczym kanale IDE. Jeśli w którymś kanale jest tryb PIO to klikasz na niego PPM i Odinstaluj. Po restarcie sprawdz czy jest lepiej

i na koniec:

1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp

2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem

Autor postu otrzymał pochwałę

**Posty:** 350 · przez **twoja mama** 21 Cze 2008, 11:44

problem znów się pojawił.. combox nie chce się uruchomić.

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:06:50, on 20/06/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe C:\Program Files\btbb_wcm\McciTrayApp.exe C:\WINDOWS\system32\RunDLL32.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\HPQ\shared\hpqwmi.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Java\jre1.6.0_03\bin\jucheck.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/customize/btyahoo/defaults/sb/*http://uk.docs.yahoo.com/info/bt_side.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [btbb_wcm_McciTrayApp] C:\Program Files\btbb_wcm\McciTrayApp.exe O4 - HKLM\..\Run: [PD0620 STISvc] RunDLL32.exe P0620Pin.dll,RunDLL32EP 513 O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: CD-MENU.LNK = D:\MENU.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: BT Broadband Desktop Help.lnk = C:\Program Files\BT Home Hub\Help\bin\matcli.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/229?329776e7e2ef4040a756216bbaa8760d O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/230?329776e7e2ef4040a756216bbaa8760d O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll (file missing) O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll (file missing) O9 - Extra button: BT Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\WINDOWS\system32\shdocvw.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL (file missing) O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\common\yinsthelper.dll O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\shared\hpqwmi.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\system32\YPCSER~1.EXE -- End of file - 8588 bytes

**Posty:** 7956 · przez **Magik** 21 Cze 2008, 12:47

Kod: Zaznacz wszystko: O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll (file missing) O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll (file missing) O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)

dajesz na fix

mozesz jeszcze z DSS'a wkleic
http://forum.programosy.pl/jak-generujemy-logi-z-combofixa-oraz-dssa-vt95026.html

BTW, zrob optymalizacje komba i jakims odkurzaczem go przelec

**Posty:** 350 · przez **twoja mama** 06 Lip 2008, 22:46

emo Magik nie pomogło

**Posty:** 8001 · przez **Okocza** 06 Lip 2008, 22:48

twoja mama daj log z DSS'a lub z Combofixa

**Posty:** 350 · przez **twoja mama** 22 Lip 2008, 15:15

okocza napisał(a):DSS'a

Kod: Zaznacz wszystko: Deckard's System Scanner v20071014.68 Extra logfile - please post this as an attachment with your post. -------------------------------------------------------------------------------- -- System Information ---------------------------------------------------------- Microsoft Windows XP Home Edition (build 2600) SP 2.0 Architecture: X86; Language: English CPU 0: AMD Turion(tm) 64 Mobile Technology ML-32 Percentage of Memory in Use: 51% Physical Memory (total/avail): 894.17 MiB / 434.67 MiB Pagefile Memory (total/avail): 2167.57 MiB / 1788.46 MiB Virtual Memory (total/avail): 2047.88 MiB / 1922.29 MiB C: is Fixed (NTFS) - 74.52 GiB total, 26.72 GiB free. D: is CDROM (No Media) \\.\PHYSICALDRIVE0 - FUJITSU MHV2080AT PL - 74.53 GiB - 1 partition \PARTITION0 (bootable) - Installable File System - 74.52 GiB - C: -- Security Center ------------------------------------------------------------- AUOptions is scheduled to auto-install. Windows Internal Firewall is enabled. FirstRunDisabled is set. AV: avast! antivirus 4.8.1169 [VPS 080722-0] v4.8.1169 (ALWIL Software) [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)" "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes" "C:\\Program Files\\Gadu-Gadu\\gg.exe"="C:\\Program Files\\Gadu-Gadu\\gg.exe:*:Enabled:Gadu-Gadu - program glówny" "C:\\StubInstaller.exe"="C:\\StubInstaller.exe:*:Enabled:LimeWire swarmed installer" "C:\\Program Files\\Yahoo!\\Messenger\\ypager.exe"="C:\\Program Files\\Yahoo!\\Messenger\\ypager.exe:*:Enabled:Yahoo! Messenger" "C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe:*:Enabled:Yahoo! FT Server" "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "C:\\Program Files\\BearShare\\BearShare.exe"="C:\\Program Files\\BearShare\\BearShare.exe:*:Enabled:BearShare" "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqtra08.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqtra08.exe:*:Enabled:hpqtra08.exe" "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqste08.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqste08.exe:*:Enabled:hpqste08.exe" "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpofxm08.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpofxm08.exe:*:Enabled:hpofxm08.exe" "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hposfx08.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hposfx08.exe:*:Enabled:hposfx08.exe" "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hposid01.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hposid01.exe:*:Enabled:hposid01.exe" "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqscnvw.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqscnvw.exe:*:Enabled:hpqscnvw.exe" "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqkygrp.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqkygrp.exe:*:Enabled:hpqkygrp.exe" "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqCopy.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqCopy.exe:*:Enabled:hpqcopy.exe" "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpfccopy.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpfccopy.exe:*:Enabled:hpfccopy.exe" "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpzwiz01.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpzwiz01.exe:*:Enabled:hpzwiz01.exe" "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpoews01.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpoews01.exe:*:Enabled:hpoews01.exe" "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqnrs08.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqnrs08.exe:*:Enabled:hpqnrs08.exe" "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\\Program Files\\Winamp Remote\\bin\\Orb.exe"="C:\\Program Files\\Winamp Remote\\bin\\Orb.exe:*:Enabled:Orb" "C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe:*:Enabled:OrbTray" "C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe:*:Enabled:Orb Stream Client" "C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype" -- Environment Variables ------------------------------------------------------- ALLUSERSPROFILE=C:\Documents and Settings\All Users APPDATA=C:\Documents and Settings\new\Application Data CLASSPATH=C:\Program Files\Java\jre1.5.0_05\lib\ext\QTJava.zip CLIENTNAME=Console CommonProgramFiles=C:\Program Files\Common Files COMPUTERNAME=NEW-9AA60E40072 ComSpec=C:\WINDOWS\system32\cmd.exe DEFAULT_CA_NR=CA6 FP_NO_HOST_CHECK=NO HOMEDRIVE=C: HOMEPATH=\Documents and Settings\new LOGONSERVER=\\NEW-9AA60E40072 NUMBER_OF_PROCESSORS=1 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\Common Files\Teleca Shared;C:\Program Files\QuickTime\QTSystem PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH PCTYPE=PAVILION PROCESSOR_ARCHITECTURE=x86 PROCESSOR_IDENTIFIER=x86 Family 15 Model 36 Stepping 2, AuthenticAMD PROCESSOR_LEVEL=15 PROCESSOR_REVISION=2402 ProgramFiles=C:\Program Files PROMPT=$P$G QTJAVA=C:\Program Files\Java\jre1.5.0_05\lib\ext\QTJava.zip ResetEnv=Y SESSIONNAME=Console SonicCentral=C:\Program Files\Common Files\Sonic Shared\Sonic Central\ SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\DOCUME~1\new\LOCALS~1\Temp TMP=C:\DOCUME~1\new\LOCALS~1\Temp USERDOMAIN=NEW-9AA60E40072 USERNAME=new USERPROFILE=C:\Documents and Settings\new windir=C:\WINDOWS -- User Profiles --------------------------------------------------------------- new [I](admin)[/I] -- Add/Remove Programs --------------------------------------------------------- --> C:\PROGRA~1\BTHOME~1\Help\Uninstall.exe btbb --> C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL --> C:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205} --> C:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382} --> C:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629} --> C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL --> C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL --> C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL --> C:\WINDOWS\UNNeroVision.exe /UNINSTALL --> C:\WINDOWS\UNRecode.exe /UNINSTALL --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{513D9FB1-27A2-44E4-8F2D-77A6737921A5}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9B7A778E-AF38-4341-9EA0-1FC981106ADA}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9B7A778E-AF38-4341-9EA0-1FC981106ADA}\setup.exe" -l0x9 /remove --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9E54F486-CD4A-44A5-B041-16D4E1E56A53}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9E54F486-CD4A-44A5-B041-16D4E1E56A53}\setup.exe" -l0x9 /remove --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A82F10CB-18B5-4EAC-AEF2-FA49CD565626}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ADC07715-D995-45EE-8810-0F1A733D580D}\SETUP.EXE" -l0x9 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E5ABA5FD-EE3D-4F15-895D-B32321E6C96B}\setup.exe" -l0x9 --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf Ad-Aware SE Personal --> C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG Adobe Flash Player ActiveX --> C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player Plugin --> C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe Adobe Photoshop CS --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}\setup.exe" -l0x15 Adobe Reader 7.0 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70000000000} Adobe® Photoshop® Album Starter Edition 3.0 --> MsiExec.exe /I{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B} Archiwizator WinRAR --> C:\Program Files\WinRAR\uninstall.exe Athlon 64 Processor Driver --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe" -l0x9 ATI - Software Uninstall Utility --> C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe ATI Control Panel --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe" ATI Display Driver --> rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean AudibleManager --> C:\Program Files\Audible\Bin\Upgrade.exe /Uninstall avast! Antivirus --> C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup BearShare --> C:\PROGRA~1\BEARSH~1\UNWISE.EXE C:\PROGRA~1\BEARSH~1\INSTALL.LOG Broadcom 802.11 Wireless LAN Adapter --> C:\WINDOWS\system32\BCMWLU00.exe verbose /rootkey=Software\Broadcom\802.11\UninstallInfo BT Broadband Desktop Help --> C:\WINDOWS\Motive\btbb\MCCUninst.exe BT Home Hub --> C:\Program Files\BT Home Hub\Uninstall.exe BT Softphone 1.5.3.6 --> "C:\Program Files\BT Broadband Talk Softphone\unins001.exe" BT Wireless Connection Manager --> C:\Program Files\Common Files\Motive\InstallHelper.exe /dir=C:\Program Files\Common Files\Motive /uninstallvendor=btbb_wcm /uninstallkey=BT Wireless Connection Manager BT Yahoo! Applications --> C:\PROGRA~1\Yahoo!\Common\uninstall.exe CCleaner (remove only) --> "C:\Program Files\CCleaner\uninst.exe" Conexant AC-Link Audio --> C:\Program Files\CONEXANT\CNXT_AUDIO\HXFSETUP.EXE -U -ICPL309BA.INF Creative Photo Manager --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{513D9FB1-27A2-44E4-8F2D-77A6737921A5}\setup.exe" -l0x9 /remove Creative WebCam Center --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E5ABA5FD-EE3D-4F15-895D-B32321E6C96B}\setup.exe" -l0x9 /remove Creative WebCam Instant Driver (1.03.02.0425) --> C:\WINDOWS\CtDrvIns.exe -uninstall -script PD0620.uns -unsext NT -plugin P0620Pin.dll -pluginres CtCamPin.crl Creative WebCam Instant User's Guide (English) --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Creative\Creative WebCam Instant\Creative WebCam Instant User's Guide\English\CTManual.isu" Creative Zen Nano Plus --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BA63612E-0458-416A-ADCD-B2349194F20F}\SETUP.EXE" -l0x9 /remove Disc2Phone --> MsiExec.exe /I{FFAB5ABB-8AAB-42E2-847F-1743E51E01E9} Easy Internet Sign-up --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{8105684D-8CA6-440D-8F58-7E5FD67A499D} /l1033 eMusic - 50 Free MP3 offer --> "C:\Program Files\Winamp\eMusic\Uninst-eMusic-promotion.exe" Gadu-Gadu 7.6 --> C:\Program Files\Gadu-Gadu\Setup.exe Google Earth --> MsiExec.exe /I{1E04F83B-2AB9-4301-9EF7-E86307F79C72} Google Toolbar for Internet Explorer --> regsvr32 /u /s "c:\program files\google\googletoolbar3.dll" High Definition Audio Driver Package - KB835221 --> C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe HijackThis 2.0.2 --> "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall HP Customer cenzura! Program 7.0 --> C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat HP Help and Support --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A93C4E94-1005-489D-BEAA-B873C1AA6CFC}\setup.exe" -l0x9 -removeonly HP Imaging Device Functions 7.0 --> C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat HP Photosmart Essential --> MsiExec.exe /X{EB21A812-671B-4D08-B974-2A347F0D8F70} HP Photosmart, Officejet and Deskjet 7.0.A --> C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzscr01.exe -datfile hposcr11.dat HP Solution Center 7.0 --> C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat HP Update --> MsiExec.exe /X{C8FD5BC1-92EF-4C15-92A9-F9AC7F61985F} HP User Guides 0012 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{984DED38-AD2A-4143-8412-C3827A920BE5}\setup.exe" -l0x9 -removeonly HP Wireless Assistant 1.01 C1 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4302B2DD-D958-40E3-BAF3-B07FFE1978CE}\setup.exe" -l0x9 hpquninst InterVideo WinDVD --> "C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL iTunes --> C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{BE20E2F5-1903-4AAE-B1AF-2046E586C925} J2SE Runtime Environment 5.0 Update 5 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150050} Java(TM) 6 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030} Last.fm 1.5.1.29527 --> "C:\Program Files\Last.fm\unins000.exe" Microsoft Office Professional Edition 2003 --> MsiExec.exe /I{90110409-6000-11D3-8CFE-0150048383C9} Microsoft Works --> MsiExec.exe /I{3D0736DC-2C04-4168-A16D-1DA6F968EBFC} Mozilla Firefox (2.0.0.16) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe Music Manager --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AFA4872-16B2-419E-ADCA-8E96E739115D}\setup.exe" -l0x9 My Global Search Bar --> rundll32 C:\PROGRA~1\MYGLOB~1\bar\1.bin\mgsBar.dll,O My Web Search (Webfetti) --> rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsbar.dll,O Nero 7 Demo --> MsiExec.exe /I{7D733D2C-3B78-97E4-2655-DA5F05871033} Odkurzacz 11.2 Pro --> "C:\Program Files\Odkurzacz\unins000.exe" Quick Launch Buttons 5.20 D2 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CEB326EC-8F40-47B2-BA22-BB092565D66F}\setup.exe" -l0x9 -uninst QuickTime --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{4E5E22C2-1386-47AE-8EDE-32DDCDCD6653} /l1033 REALTEK Gigabit and Fast Ethernet NIC Driver --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{94FB906A-CF42-4128-A509-D353026A607E}\setup.exe" -l0x9 REMOVE Security Update for CAPICOM (KB931906) --> MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Security Update for CAPICOM (KB931906) --> MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Skype 3.0 --> "C:\Program Files\Skype\Phone\unins000.exe" Skype add-on for IE --> rundll32 "C:\Program Files\Skype\Phone\IEPlugin\SkypeIEPlugin.dll",FriendlyUnregisterServer 0 Skype Plugin Manager --> MsiExec.exe /I{3D5E5C0A-5B36-4F98-99A7-287F7DBDCE03} Soft Data Fax Modem with SmartCP --> C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_1002&DEV_4378\HXFSETUP.EXE -U -Icpl309bk.inf Sonic Audio Module --> MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382} Sonic Copy Module --> MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629} Sonic Data Module --> MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205} Sonic Express Labeler --> MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA} Sonic MyDVD Plus --> MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29} Sonic Update Manager --> MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E} Sony Ericsson PC Suite 1.20.224 --> MsiExec.exe /I{7689CA7A-1270-425A-9959-EB4CB25EA29A} Synaptics Pointing Device Driver --> rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall Tabbed Browsing (Windows Live Toolbar) --> MsiExec.exe /X{47FBF7F9-FBD3-43EF-823B-7684D56C1962} Texas Instruments PCIxx21/x515 drivers. --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{FF6F491D-BC82-4DCC-A72F-1824957C6466} /l1033 WebCam Instant Product Registration --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ADC07715-D995-45EE-8810-0F1A733D580D}\SETUP.EXE" -l0x9 /remove Winamp --> "C:\Program Files\Winamp\UninstWA.exe" Winamp Remote --> "C:\Program Files\Winamp Remote\uninstall.exe" Winamp Toolbar for Firefox --> "C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\norj7npl.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\uninstall.exe" Winamp Toolbar for Internet Explorer --> "C:\Program Files\Winamp Toolbar\uninstall.exe" Windows Live Messenger --> MsiExec.exe /I{571700F0-DB9D-4B3A-B03D-35A14BB5939F} Windows Live Sign-in Assistant --> MsiExec.exe /I{49672EC2-171B-47B4-8CE7-50D7806360D7} Windows Live Toolbar --> "C:\Program Files\Windows Live Toolbar\UnInstall.exe" {D5A145FC-D00C-4F1A-9119-EB4D9D659750} Windows Live Toolbar --> MsiExec.exe /X{D5A145FC-D00C-4F1A-9119-EB4D9D659750} -- Application Event Log ------------------------------------------------------- Event Record #/Type244 / Error Event Submitted/Written: 07/22/2008 02:08:17 PM Event ID/Source: 8 / crypt32 Event Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This operation returned because the timeout period expired. Event Record #/Type235 / Success Event Submitted/Written: 07/22/2008 09:03:55 AM Event ID/Source: 12001 / usnjsvc Event Description: The Messenger Sharing USN Journal Reader service started successfully. Event Record #/Type221 / Success Event Submitted/Written: 07/21/2008 08:28:03 PM Event ID/Source: 12001 / usnjsvc Event Description: The Messenger Sharing USN Journal Reader service started successfully. Event Record #/Type209 / Success Event Submitted/Written: 07/20/2008 08:45:30 PM Event ID/Source: 12001 / usnjsvc Event Description: The Messenger Sharing USN Journal Reader service started successfully. Event Record #/Type200 / Success Event Submitted/Written: 07/19/2008 10:00:01 PM Event ID/Source: 12001 / usnjsvc Event Description: The Messenger Sharing USN Journal Reader service started successfully. -- Security Event Log ---------------------------------------------------------- No Errors/Warnings found. -- System Event Log ------------------------------------------------------------ Event Record #/Type37604 / Error Event Submitted/Written: 07/22/2008 08:44:50 AM Event ID/Source: 7000 / Service Control Manager Event Description: The General Purpose USB Driver (adildr.sys) service failed to start due to the following error: %%2 Event Record #/Type37567 / Error Event Submitted/Written: 07/21/2008 07:02:33 PM Event ID/Source: 7000 / Service Control Manager Event Description: The General Purpose USB Driver (adildr.sys) service failed to start due to the following error: %%2 Event Record #/Type37534 / Error Event Submitted/Written: 07/21/2008 06:22:51 PM Event ID/Source: 7000 / Service Control Manager Event Description: The General Purpose USB Driver (adildr.sys) service failed to start due to the following error: %%2 Event Record #/Type37525 / Error Event Submitted/Written: 07/20/2008 08:03:17 PM Event ID/Source: 10010 / DCOM Event Description: The server {A1F4E726-8CF1-11D1-BF92-0060081ED811} did not register with DCOM within the required timeout. Event Record #/Type37501 / Error Event Submitted/Written: 07/20/2008 08:01:15 PM Event ID/Source: 7000 / Service Control Manager Event Description: The General Purpose USB Driver (adildr.sys) service failed to start due to the following error: %%2 -- End of Deckard's System Scanner: finished at 2008-07-22 14:09:18 ------------

Kod: Zaznacz wszystko: Deckard's System Scanner v20071014.68 Run by new on 2008-07-22 14:04:14 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- Successfully created a Deckard's System Scanner Restore Point. -- Last 5 Restore Point(s) -- 7: 2008-07-22 13:04:49 UTC - RP456 - Deckard's System Scanner Restore Point 6: 2008-07-22 11:12:20 UTC - RP455 - System Checkpoint 5: 2008-07-12 21:38:28 UTC - RP454 - System Checkpoint 4: 2008-07-11 20:27:48 UTC - RP453 - System Checkpoint 3: 2008-07-10 19:12:59 UTC - RP452 - System Checkpoint -- First Restore Point -- 1: 2008-07-07 19:19:59 UTC - RP450 - System Checkpoint Backed up registry hives. Performed disk cleanup. -- HijackThis (run as new.exe) ------------------------------------------------- Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:07:57, on 22/07/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe C:\Program Files\btbb_wcm\McciTrayApp.exe C:\WINDOWS\system32\RunDLL32.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\HPQ\shared\hpqwmi.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Skype\Plugin Manager\SkypePM.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Gadu-Gadu\gg.exe C:\PROGRA~1\MOZILL~2\FIREFOX.EXE C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\new\Desktop\dss.exe C:\PROGRA~1\TRENDM~1\HIJACK~1\new.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/customize/btyahoo/defaults/sb/*http://uk.docs.yahoo.com/info/bt_side.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [btbb_wcm_McciTrayApp] C:\Program Files\btbb_wcm\McciTrayApp.exe O4 - HKLM\..\Run: [PD0620 STISvc] RunDLL32.exe P0620Pin.dll,RunDLL32EP 513 O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [Odkurzacz-MCD] C:\Program Files\Odkurzacz\odk_mcd.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: CD-MENU.LNK = D:\MENU.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/229?329776e7e2ef4040a756216bbaa8760d O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/230?329776e7e2ef4040a756216bbaa8760d O9 - Extra button: BT Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\WINDOWS\system32\shdocvw.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\common\yinsthelper.dll O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\shared\hpqwmi.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\system32\YPCSER~1.EXE -- End of file - 7407 bytes -- HijackThis Fixed Entries (C:\PROGRA~1\TRENDM~1\HIJACK~1\backups\) ----------- backup-20080519-214016-297 O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL backup-20080519-214016-420 O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL backup-20080519-214016-839 O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll backup-20080519-214016-987 O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll backup-20080519-214018-947 O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll backup-20080519-214019-279 O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL backup-20080519-214019-822 O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll backup-20080519-214020-435 O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll backup-20080519-214022-194 O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) backup-20080519-214022-479 O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll backup-20080519-214022-649 O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll backup-20080519-214027-982 O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll backup-20080519-214028-286 O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll backup-20080519-214029-914 O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll backup-20080520-203857-146 O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (file missing) backup-20080520-203857-457 O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w backup-20080520-203857-603 O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (file missing) backup-20080520-203857-852 O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZK backup-20080520-213205-236 O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background backup-20080520-213205-247 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;2 backup-20080520-213205-567 O4 - HKLM\..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe backup-20080520-213205-600 R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll (file missing) backup-20080520-213205-632 O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll (file missing) backup-20080520-213205-810 O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll (file missing) backup-20080520-213205-820 R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (file missing) backup-20080520-213205-899 O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (file missing) backup-20080520-213205-995 O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll (file missing) backup-20080622-182813-198 O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL (file missing) backup-20080622-182813-554 O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll (file missing) backup-20080622-182813-890 O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html backup-20080622-182813-931 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll (file missing) backup-20080622-182814-627 O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) backup-20080622-182814-680 O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) -- File Associations ----------------------------------------------------------- All associations okay. -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- R3 MRENDIS5 (MRENDIS5 NDIS Protocol Driver) - c:\program files\common files\motive\mrendis5.sys <Not Verified; Motive, Inc.; Motive Rawether for Windows> S1 InCDPass - c:\windows\system32\drivers\incdpass.sys (file missing) S1 InCDRm (InCD Reader) - c:\windows\system32\drivers\incdrm.sys (file missing) S2 ADILOADER (General Purpose USB Driver (adildr.sys)) - c:\windows\system32\drivers\adildr.sys (file missing) S3 adiusbaw (USB ADSL WAN Adapter) - c:\windows\system32\drivers\adiusbaw.sys (file missing) S4 InCDFs (InCD File System) - c:\windows\system32\drivers\incdfs.sys (file missing) -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- R3 hpqwmi (HP WMI Interface) - c:\program files\hpq\shared\hpqwmi.exe <Not Verified; Hewlett-Packard Development Company, L.P.; hpqwmi Module> S3 YPCService - c:\windows\system32\ypcser~1.exe <Not Verified; Yahoo! Inc.; YPCService Module> -- Device Manager: Disabled ---------------------------------------------------- No disabled devices found. -- Scheduled Tasks ------------------------------------------------------------- 2008-07-22 13:26:03 256 --a------ C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job 2007-04-19 01:33:00 268 --a------ C:\WINDOWS\Tasks\Easy Internet Sign-up.job -- Files created between 2008-06-22 and 2008-07-22 ----------------------------- 2008-07-08 16:12:32 0 d-------- C:\Program Files\Odkurzacz -- Find3M Report --------------------------------------------------------------- 2008-07-22 13:54:45 0 d-------- C:\Documents and Settings\new\Application Data\Skype 2008-07-08 16:45:48 0 d-------- C:\Program Files\Incomplete 2008-07-08 16:45:47 0 d-------- C:\Program Files\Last.fm 2008-07-08 16:45:47 0 d-------- C:\Program Files\eMule 2008-07-08 16:45:45 0 d-------- C:\Program Files\QuickTime 2008-06-18 13:18:44 0 d-------- C:\Documents and Settings\new\Application Data\Adobe 2008-06-13 14:01:56 0 d-------- C:\Program Files\Winamp 2008-06-08 10:23:52 4978 --a------ C:\Documents and Settings\new\Application Data\wklnhst.dat -- Registry Dump --------------------------------------------------------------- *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [04/08/2004 13:00] "PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [04/08/2004 13:00] "PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [04/08/2004 13:00] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [19/06/2005 21:50] "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [27/09/2005 22:05] "Cpqset"="C:\Program Files\HPQ\Default Settings\cpqset.exe" [01/08/2005 15:26] "HP Software Update"="C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe" [08/05/2007 16:24] "eabconfg.cpl"="C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe" [11/10/2005 17:17] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [25/09/2007 02:11] "hpWirelessAssistant"="C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe" [04/05/2005 11:59] "Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" [07/06/2005 00:46] "Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [26/10/2005 18:17] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [07/02/2007 11:53] "btbb_wcm_McciTrayApp"="C:\Program Files\btbb_wcm\McciTrayApp.exe" [29/12/2005 11:22] "PD0620 STISvc"="P0620Pin.dll" [10/05/2005 18:03 C:\WINDOWS\system32\P0620Pin.dll] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [04/08/2004 13:00] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [14/06/2007 20:59] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" [16/12/2005 13:57] "Odkurzacz-MCD"="C:\Program Files\Odkurzacz\odk_mcd.exe" [03/03/2008 14:44] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "DisableRegistryTools"=0 (0x0) "HideLegacyLogonScripts"=0 (0x0) "HideLogoffScripts"=0 (0x0) "RunLogonScriptSync"=1 (0x1) "RunStartupScriptSync"=0 (0x0) "HideStartupScripts"=0 (0x0) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "HideLegacyLogonScripts"=0 (0x0) "HideLogoffScripts"=0 (0x0) "RunLogonScriptSync"=1 (0x1) "RunStartupScriptSync"=0 (0x0) "HideStartupScripts"=0 (0x0) "disableregistrytools"=0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk] path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^BT Broadband Desktop Help.lnk] path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\BT Broadband Desktop Help.lnk backup=C:\WINDOWS\pss\BT Broadband Desktop Help.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk] path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eyeBeam SIP Client] "C:\Program Files\BT Broadband Talk Softphone\BTSoftphone.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Motive SmartBridge] C:\PROGRA~1\BTHOME~1\Help\SMARTB~1\BTHelpNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] C:\Program Files\Winamp\winampa.exe -- End of Deckard's System Scanner: finished at 2008-07-22 14:09:18 ------------

**Posty:** 18165 · przez **wojtas** 22 Lip 2008, 16:49

czysto

**Posty:** 350 · przez **twoja mama** 22 Lip 2008, 18:16

więc co może być przyczyną ?

**Posty:** 84 · przez **gloni** 22 Lip 2008, 18:31

zobaczył byś czy masz taki wpis w HijackThis

Kod: Zaznacz wszystko: C:\PROGRA~1\TRENDM~1\HIJACK~1\new.exe

a najlepiej podaj jeszcze raz logo z HijackThis

Zastosuj ten program może coś ciekiekawgo znajdzie (ale autalizacje zrób programu ) http://download5.emsisoft.com/a2FreeSetup.exe

**Posty:** 350 · przez **twoja mama** 23 Lip 2008, 23:31

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:22:56, on 23/07/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe C:\Program Files\btbb_wcm\McciTrayApp.exe C:\WINDOWS\system32\RunDLL32.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\HPQ\shared\hpqwmi.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Winamp\winamp.exe C:\Program Files\Last.fm\LastFM.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/customize/btyahoo/defaults/sb/*http://uk.docs.yahoo.com/info/bt_side.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [btbb_wcm_McciTrayApp] C:\Program Files\btbb_wcm\McciTrayApp.exe O4 - HKLM\..\Run: [PD0620 STISvc] RunDLL32.exe P0620Pin.dll,RunDLL32EP 513 O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [Odkurzacz-MCD] C:\Program Files\Odkurzacz\odk_mcd.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: CD-MENU.LNK = D:\MENU.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/229?329776e7e2ef4040a756216bbaa8760d O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/230?329776e7e2ef4040a756216bbaa8760d O9 - Extra button: BT Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\WINDOWS\system32\shdocvw.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\common\yinsthelper.dll O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\shared\hpqwmi.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\system32\YPCSER~1.EXE -- End of file - 7327 bytes

**Posty:** 7956 · przez **Magik** 24 Lip 2008, 00:04

twoja mama :arrow:

ten log masz czysciutki

twoja mama napisał(a):Bardzo wolno jej się ładuje system (około 10 minut), wszystko wolno się otwiera, muzyka się przerywa

pierwsza rzecz-->uzyj BootVis

druga :arrow:

zainteresuj sie sterownikami nowymi

popatrz co siedzi w msconfig//zakladka autostart//wrzuc screen moze da sie cosik wyrzucic

bardzo wolny komputer

bardzo wolny komputer

Kto jest na forum