Forum komputerowe PC Town :: Zobacz temat - OTL

Forum PC Town

Strona Główna

FAQ

Szukaj

Użytkownicy

Grupy

Rejestracja

Zaloguj

Forum komputerowe PC Town Strona Główna » Kompiradło » Bezpieczeństwo w sieci » OTL - log

Poprzedni temat :: Następny temat

OTL - log

Autor

Wiadomość

apstrakcja

Wysłany: 2011-01-29, 01:14 OTL - log

bardzo prosze o pomoc w logu OTL http://wklej.org/id/466476/

@Blade@

Pomógł: 8 razy

Wysłany: 2011-01-29, 08:45

Zabrakło najważniejszego logu z OTL (OTL.txt), uzupełnij to. Podaj także log z GMER
_________________

apstrakcja

Wysłany: 2011-01-29, 11:57

OTL logfile created on: 2011-01-28 23:50:13 - Run 1 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Users\tomek\Downloads Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 7.0.6002.18005) Locale: 00000415 \| Country: Polska \| Language: PLK \| Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory \| 2,00 Gb Available Physical Memory \| 59,00% Memory free 6,00 Gb Paging File \| 5,00 Gb Available in Paging File \| 84,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files Drive C: \| 206,79 Gb Total Space \| 19,38 Gb Free Space \| 9,37% Space Free \| Partition Type: NTFS Drive E: \| 81,54 Gb Total Space \| 81,44 Gb Free Space \| 99,88% Space Free \| Partition Type: NTFS Computer Name: TOMEK-PC \| User Name: tomek \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: Current user Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011-01-28 23:50:03 \| 000,602,624 \| ---- \| M] (OldTimer Tools) -- C:\Users\tomek\Downloads\OTL.exe PRC - [2011-01-19 14:05:23 \| 000,131,072 \| RHS- \| M] () -- C:\Users\tomek\poiizuq.exe PRC - [2010-12-16 06:19:28 \| 012,984,928 \| ---- \| M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe PRC - [2010-07-04 18:13:56 \| 000,095,576 \| ---- \| M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe PRC - [2010-07-04 18:07:40 \| 000,238,952 \| ---- \| M] (Teruten) -- C:\Windows\System32\FsUsbExService.Exe PRC - [2010-03-24 13:20:19 \| 000,910,296 \| ---- \| M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-10-08 20:16:30 \| 000,039,408 \| ---- \| M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe PRC - [2009-04-11 07:27:36 \| 002,926,592 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009-04-11 07:27:28 \| 000,069,120 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe PRC - [2009-01-28 08:39:02 \| 000,185,640 \| ---- \| M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe PRC - [2007-12-26 22:38:32 \| 000,297,528 \| ---- \| M] (ASUS) -- C:\Program Files\ASUS\SmartLogon\sensorsrv.exe PRC - [2007-11-30 19:20:44 \| 000,051,768 \| ---- \| M] () -- C:\Program Files\ASUS\ASUS Live Update\ALU.exe PRC - [2007-10-17 00:24:32 \| 000,229,376 \| ---- \| M] (ATK0100) -- C:\Program Files\ATK Hotkey\HControl.exe PRC - [2007-10-03 05:53:00 \| 000,094,208 \| ---- \| M] () -- C:\Program Files\ATK Hotkey\AsLdrSrv.exe PRC - [2007-09-26 19:24:12 \| 000,147,456 \| ---- \| M] () -- C:\Program Files\ASUS\ASUS CopyProtect\ASPG.exe PRC - [2007-08-15 19:38:30 \| 000,147,456 \| ---- \| M] () -- C:\Program Files\ATK Hotkey\WDC.exe PRC - [2007-08-15 19:20:16 \| 000,106,496 \| ---- \| M] () -- C:\Program Files\ATK Hotkey\KBFiltr.exe PRC - [2007-08-08 19:03:42 \| 002,441,216 \| ---- \| M] () -- C:\Program Files\ATK Hotkey\ATKOSD.exe PRC - [2007-08-08 08:08:40 \| 000,094,208 \| ---- \| M] () -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe PRC - [2007-08-03 20:24:54 \| 000,125,496 \| ---- \| M] () -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe PRC - [2007-07-24 10:15:14 \| 000,185,632 \| ---- \| M] (Protexis Inc.) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe PRC - [2007-07-06 00:53:44 \| 001,040,384 \| ---- \| M] () -- C:\Program Files\Wireless Console 2\wcourier.exe PRC - [2007-05-18 10:31:16 \| 000,073,728 \| ---- \| M] () -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe ========== Modules (SafeList) ========== MOD - [2011-01-28 23:50:03 \| 000,602,624 \| ---- \| M] (OldTimer Tools) -- C:\Users\tomek\Downloads\OTL.exe MOD - [2010-08-31 16:43:52 \| 001,686,016 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll MOD - [2007-03-09 19:51:16 \| 000,061,440 \| ---- \| M] (Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\r3hook.dll MOD - [2007-03-09 19:48:32 \| 000,147,520 \| ---- \| M] (Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll ========== Win32 Services (SafeList) ========== SRV - File not found [Auto \| Stopped] -- -- (SymAppCore) SRV - [2010-07-04 18:07:40 \| 000,238,952 \| ---- \| M] (Teruten) [Auto \| Running] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService) SRV - [2010-03-18 13:16:28 \| 000,753,504 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400) SRV - [2010-03-18 13:16:28 \| 000,130,384 \| ---- \| M] (Microsoft Corporation) [Auto \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-09-25 02:27:04 \| 000,793,088 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\System32\FntCache.dll -- (FontCache) SRV - [2009-08-24 12:36:45 \| 000,377,344 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- winhttp.dll -- (WinHttpAutoProxySvc) SRV - [2009-01-28 08:39:02 \| 000,185,640 \| ---- \| M] (TeamViewer GmbH) [Auto \| Running] -- C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe -- (TeamViewer4) SRV - [2008-04-07 08:17:30 \| 000,430,592 \| ---- \| M] (Nokia.) [On_Demand \| Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2008-01-21 03:23:32 \| 000,272,952 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2007-10-03 05:53:00 \| 000,094,208 \| ---- \| M] () [Auto \| Running] -- C:\Program Files\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService) SRV - [2007-08-08 08:08:40 \| 000,094,208 \| ---- \| M] () [Auto \| Running] -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv) SRV - [2007-08-03 20:24:54 \| 000,125,496 \| ---- \| M] () [Auto \| Running] -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe -- (spmgr) SRV - [2007-07-24 10:15:14 \| 000,185,632 \| ---- \| M] (Protexis Inc.) [Auto \| Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2) SRV - [2007-05-18 10:31:16 \| 000,073,728 \| ---- \| M] () [Auto \| Running] -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService) SRV - [2007-03-20 02:19:14 \| 000,263,168 \| ---- \| M] (Ares Development Group) [On_Demand \| Stopped] -- C:\Program Files\Ares\chatServer.exe -- (AresChatServer) SRV - [2007-03-09 19:50:58 \| 000,200,768 \| ---- \| M] (Kaspersky Lab) [Auto \| Stopped] -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe -- (AVP) ========== Driver Services (SafeList) ========== DRV - [2011-01-28 23:06:14 \| 000,115,992 \| ---- \| M] (Kaspersky Lab) [File_System \| System \| Running] -- C:\Windows\System32\drivers\klif.sys -- (KLIF) DRV - [2010-06-14 08:32:54 \| 000,036,608 \| ---- \| M] () [Kernel \| On_Demand \| Running] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk) DRV - [2010-04-27 03:25:16 \| 000,123,648 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\ss_bmdm.sys -- (ss_bmdm) DRV - [2010-04-27 03:25:16 \| 000,098,432 \| ---- \| M] (MCCI) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM) DRV - [2010-04-27 03:25:16 \| 000,014,848 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter) DRV - [2010-03-07 21:21:15 \| 000,691,696 \| ---- \| M] () [Kernel \| Boot \| Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd) DRV - [2009-11-21 03:34:54 \| 011,515,752 \| ---- \| M] (NVIDIA Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2009-03-28 20:47:33 \| 000,025,280 \| ---- \| M] (LogMeIn, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi) DRV - [2008-01-21 03:23:27 \| 000,386,616 \| ---- \| M] (LSI Corporation, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\megasr.sys -- (MegaSR) DRV - [2008-01-21 03:23:27 \| 000,149,560 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320) DRV - [2008-01-21 03:23:27 \| 000,031,288 \| ---- \| M] (LSI Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas) DRV - [2008-01-21 03:23:26 \| 000,101,432 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m) DRV - [2008-01-21 03:23:26 \| 000,074,808 \| ---- \| M] (Silicon Integrated Systems) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4) DRV - [2008-01-21 03:23:26 \| 000,040,504 \| ---- \| M] (Hewlett-Packard Company) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs) DRV - [2008-01-21 03:23:25 \| 000,300,600 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci) DRV - [2008-01-21 03:23:25 \| 000,089,656 \| ---- \| M] (LSI Logic) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS) DRV - [2008-01-21 03:23:24 \| 001,122,360 \| ---- \| M] (QLogic Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300) DRV - [2008-01-21 03:23:24 \| 000,118,784 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel(R) DRV - [2008-01-21 03:23:24 \| 000,079,928 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas) DRV - [2008-01-21 03:23:23 \| 000,235,064 \| ---- \| M] (Intel Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV) DRV - [2008-01-21 03:23:23 \| 000,130,616 \| ---- \| M] (VIA Technologies Inc.,Ltd) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid) DRV - [2008-01-21 03:23:23 \| 000,115,816 \| ---- \| M] (Promise Technology, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2) DRV - [2008-01-21 03:23:23 \| 000,096,312 \| ---- \| M] (LSI Logic) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI) DRV - [2008-01-21 03:23:23 \| 000,096,312 \| ---- \| M] (LSI Logic) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC) DRV - [2008-01-21 03:23:23 \| 000,079,416 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc) DRV - [2008-01-21 03:23:22 \| 000,342,584 \| ---- \| M] (Emulex) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor) DRV - [2008-01-21 03:23:21 \| 000,422,968 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx) DRV - [2008-01-21 03:23:21 \| 000,102,968 \| ---- \| M] (NVIDIA Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid) DRV - [2008-01-21 03:23:21 \| 000,045,112 \| ---- \| M] (NVIDIA Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor) DRV - [2008-01-21 03:23:20 \| 002,225,664 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\NETw3v32.sys -- (NETw3v32) Intel(R) DRV - [2008-01-21 03:23:20 \| 000,238,648 \| ---- \| M] (ULi Electronics Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci) DRV - [2008-01-21 03:23:00 \| 000,020,024 \| ---- \| M] (VIA Technologies, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide) DRV - [2008-01-21 03:23:00 \| 000,019,000 \| ---- \| M] (CMD Technology, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide) DRV - [2008-01-21 03:23:00 \| 000,017,464 \| ---- \| M] (Acer Laboratories Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide) DRV - [2007-10-31 12:56:00 \| 000,046,592 \| ---- \| M] (Atheros Communications, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\l160x86.sys -- (AtcL001) DRV - [2007-10-01 07:59:46 \| 001,769,984 \| ---- \| M] () [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC) DRV - [2007-09-29 16:03:12 \| 000,308,248 \| ---- \| M] (Intel Corporation) [Kernel \| Boot \| Running] -- C:\Windows\system32\DRIVERS\iaStor.sys -- (iaStor) DRV - [2007-09-26 23:03:42 \| 000,015,416 \| ---- \| M] (Windows (R) Codename Longhorn DDK provider) [File_System \| Boot \| Running] -- C:\Windows\system32\DRIVERS\lullaby.sys -- (lullaby) DRV - [2007-09-17 14:53:26 \| 000,021,632 \| ---- \| M] (Nokia) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2007-09-05 10:36:26 \| 001,953,944 \| ---- \| M] (Realtek Semiconductor Corp.) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\RTKVHDA.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2007-08-28 04:53:48 \| 001,019,136 \| ---- \| M] (Motorola Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\smserial.sys -- (smserial) DRV - [2007-08-11 04:19:26 \| 000,029,752 \| ---- \| M] (Windows (R) Codename Longhorn DDK provider) [File_System \| Boot \| Running] -- C:\Windows\System32\drivers\AsDsm.sys -- (AsDsm) DRV - [2007-08-08 13:42:08 \| 000,045,568 \| ---- \| M] (REDC) [Kernel \| Auto \| Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk) DRV - [2007-08-03 05:26:22 \| 000,020,936 \| ---- \| M] () [Kernel \| Auto \| Running] -- C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys -- (ghaio) DRV - [2007-07-30 04:54:02 \| 000,038,400 \| ---- \| M] (REDC) [Kernel \| Auto \| Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp) DRV - [2007-07-30 03:42:58 \| 000,043,008 \| ---- \| M] (REDC) [Kernel \| Auto \| Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk) DRV - [2007-07-24 19:09:04 \| 000,013,880 \| ---- \| M] () [Kernel \| Auto \| Running] -- C:\Program Files\ATKGFNEX\ASMMAP.sys -- (ASMMAP) DRV - [2007-06-20 21:51:28 \| 002,222,080 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\NETw4v32.sys -- (NETw4v32) Sterownik karty Intel(R) DRV - [2007-03-03 20:39:06 \| 000,110,360 \| ---- \| M] (Kaspersky Lab) [Kernel \| System \| Running] -- C:\Windows\System32\drivers\kl1.sys -- (kl1) DRV - [2007-01-25 19:33:22 \| 000,020,760 \| ---- \| M] (Kaspersky Lab) [Kernel \| System \| Running] -- C:\Windows\System32\drivers\klim6.sys -- (KLIM6) DRV - [2007-01-24 11:08:40 \| 000,005,632 \| ---- \| M] ( ) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr) DRV - [2006-12-22 20:05:34 \| 000,449,536 \| ---- \| M] (Atheros Communications, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\athrusb.sys -- (athrusb) DRV - [2006-12-14 08:11:58 \| 000,007,680 \| ---- \| M] (ATK0100) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor) DRV - [2006-11-02 10:50:35 \| 000,106,088 \| ---- \| M] (QLogic Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx) DRV - [2006-11-02 10:50:35 \| 000,098,408 \| ---- \| M] (Promise Technology, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata) DRV - [2006-11-02 10:50:19 \| 000,045,160 \| ---- \| M] (IBM Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960) DRV - [2006-11-02 10:50:17 \| 000,041,576 \| ---- \| M] (Intel Corp./ICP vortex GmbH) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp) DRV - [2006-11-02 10:50:11 \| 000,071,272 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx) DRV - [2006-11-02 10:50:09 \| 000,035,944 \| ---- \| M] (Integrated Technology Express, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid) DRV - [2006-11-02 10:50:07 \| 000,035,944 \| ---- \| M] (Integrated Technology Express, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi) DRV - [2006-11-02 10:50:05 \| 000,035,944 \| ---- \| M] (LSI Logic) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx) DRV - [2006-11-02 10:50:03 \| 000,034,920 \| ---- \| M] (LSI Logic) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3) DRV - [2006-11-02 10:49:59 \| 000,033,384 \| ---- \| M] (LSI Logic Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x) DRV - [2006-11-02 10:49:56 \| 000,031,848 \| ---- \| M] (LSI Logic) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi) DRV - [2006-11-02 09:25:24 \| 000,071,808 \| ---- \| M] (Brother Industries Ltd.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM) DRV - [2006-11-02 09:24:47 \| 000,011,904 \| ---- \| M] (Brother Industries Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer) DRV - [2006-11-02 09:24:46 \| 000,005,248 \| ---- \| M] (Brother Industries, Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp) DRV - [2006-11-02 09:24:45 \| 000,013,568 \| ---- \| M] (Brother Industries, Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo) DRV - [2006-11-02 09:24:44 \| 000,062,336 \| ---- \| M] (Brother Industries Ltd.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm) DRV - [2006-11-02 09:24:44 \| 000,012,160 \| ---- \| M] (Brother Industries Ltd.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm) DRV - [2006-11-02 08:36:50 \| 000,020,608 \| ---- \| M] (N-trig Innovative Technologies) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi) DRV - [2006-11-02 08:30:56 \| 000,194,048 \| ---- \| M] (Marvell) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\yk60x86.sys -- (yukonwlh) DRV - [2006-09-24 14:28:46 \| 000,005,248 \| ---- \| M] (Windows (R) 2000 DDK provider) [Kernel \| Boot \| Running] -- C:\Windows\system32\speedfan.sys -- (speedfan) DRV - [1996-04-03 20:33:26 \| 000,005,248 \| ---- \| M] () [Kernel \| Boot \| Running] -- C:\Windows\system32\giveio.sys -- (giveio) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.idg.pl IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.idg.pl IE - HKLM\..\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files\Softonic-Polska\tbSoft.dll (Conduit Ltd.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.idg.pl IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.google.pl/ [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com...&ctid=CT2530240 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\..\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files\Softonic-Polska\tbSoft.dll (Conduit Ltd.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = plimus.com,www.plimus.com,regnow.com,www.regnow.com, IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = socks= ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "Yahoo" FF - prefs.js..browser.search.defaultthis.engineName: "Softonic-Polska Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2530240&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=937811" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.1.0014 FF - prefs.js..extensions.enabledItems: {9764bb84-7272-11dd-8eb6-20d155d89550}:2.0.0 FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.0 FF - prefs.js..extensions.enabledItems: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf}:2.5.6.0 FF - prefs.js..extensions.enabledItems: zrzuta.eu@gmail.com:1.2 FF - prefs.js..extensions.enabledItems: wtxpcom@mybrowserbar.com:4.1 FF - prefs.js..extensions.enabledItems: youtubedownloader@mybrowserbar.com:4.1 FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2530240&q=" FF - prefs.js..network.proxy.no_proxies_on: "" FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Program Files\Real\RealPlayer\browserrecord [2009-08-26 16:02:48 \| 000,000,000 \| ---D \| M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.2pre\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-10-28 07:28:23 \| 000,000,000 \| ---D \| M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.2pre\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-01-05 01:04:15 \| 000,000,000 \| ---D \| M] [2008-10-18 10:54:53 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\tomek\AppData\Roaming\mozilla\Extensions [2011-01-28 17:27:42 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\tomek\AppData\Roaming\mozilla\Firefox\Profiles\e2h9sfha.default\extensions [2009-10-09 12:25:48 \| 000,000,000 \| ---D \| M] (Microsoft .NET Framework Assistant) -- C:\Users\tomek\AppData\Roaming\mozilla\Firefox\Profiles\e2h9sfha.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2009-02-01 23:48:09 \| 000,000,000 \| ---D \| M] (FoxGame) -- C:\Users\tomek\AppData\Roaming\mozilla\Firefox\Profiles\e2h9sfha.default\extensions\{b66bc4c3-6d25-4a10-8c59-01daa9063051} [2010-02-18 14:18:32 \| 000,000,000 \| ---D \| M] (Softonic-Polska Toolbar) -- C:\Users\tomek\AppData\Roaming\mozilla\Firefox\Profiles\e2h9sfha.default\extensions\{c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} [2010-03-07 21:22:36 \| 000,000,000 \| ---D \| M] ("DAEMON Tools Toolbar") -- C:\Users\tomek\AppData\Roaming\mozilla\Firefox\Profiles\e2h9sfha.default\extensions\DTToolbar@toolbarnet.com [2010-11-01 19:29:52 \| 000,000,000 \| ---D \| M] (Zrzuta.eu) -- C:\Users\tomek\AppData\Roaming\mozilla\Firefox\Profiles\e2h9sfha.default\extensions\zrzuta.eu@gmail.com [2010-02-09 17:25:50 \| 000,000,933 \| ---- \| M] () -- C:\Users\tomek\AppData\Roaming\Mozilla\Firefox\Profiles\e2h9sfha.default\searchplugins\conduit.xml [2010-03-07 21:22:13 \| 000,002,055 \| ---- \| M] () -- C:\Users\tomek\AppData\Roaming\Mozilla\Firefox\Profiles\e2h9sfha.default\searchplugins\daemon-search.xml [2009-04-28 11:20:47 \| 000,009,895 \| ---- \| M] () -- C:\Users\tomek\AppData\Roaming\Mozilla\Firefox\Profiles\e2h9sfha.default\searchplugins\mywebsearch.xml [2010-11-01 19:56:04 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2010-11-01 19:56:04 \| 000,000,000 \| ---D \| M] (Widgi Toolbar Platform) -- C:\PROGRAM FILES\COMMON FILES\SPIGOT\WTXPCOM [2009-08-26 16:02:48 \| 000,000,000 \| ---D \| M] (RealPlayer Browser Record Plugin) -- C:\PROGRAM FILES\REAL\REALPLAYER\BROWSERRECORD [2010-11-01 19:56:04 \| 000,000,000 \| ---D \| M] (YouTube Downloader Toolbar) -- C:\PROGRAM FILES\YOUTUBE DOWNLOADER TOOLBAR\FF [2010-03-12 14:42:31 \| 000,000,000 \| ---D \| M] ("Hide IP NG Add-on") -- C:\USERS\TOMEK\APPDATA\ROAMING\HIDE IP NG\FIREFOX_PLUGIN [2008-01-23 07:20:30 \| 000,491,520 \| ---- \| M] (BitComet) -- C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll [2010-11-18 17:44:16 \| 001,680,272 \| ---- \| M] (Caminova, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdjvu.dll [2010-03-15 14:13:57 \| 000,002,767 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2010-03-15 14:13:57 \| 000,001,406 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2010-03-15 14:13:57 \| 000,000,917 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2010-03-15 14:13:57 \| 000,000,858 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2010-03-15 14:13:57 \| 000,001,183 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2010-03-15 14:13:57 \| 000,001,683 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2006-09-18 22:41:30 \| 000,000,761 \| ---- \| M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll (Google Inc.) O2 - BHO: (Softonic-Polska Toolbar) - {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files\Softonic-Polska\tbSoft.dll (Conduit Ltd.) O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - File not found O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM\..\Toolbar: (Softonic-Polska Toolbar) - {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files\Softonic-Polska\tbSoft.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKCU\..\Toolbar\WebBrowser: (Softonic-Polska Toolbar) - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - C:\Program Files\Softonic-Polska\tbSoft.dll (Conduit Ltd.) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe (Kaspersky Lab) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [NPSStartup] File not found O4 - HKCU..\Run: [ares] C:\Program Files\Ares\Ares.exe (Ares Development Group) O4 - HKCU..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.) O4 - HKCU..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKCU..\Run: [poiizuq] C:\Users\tomek\poiizuq.exe () O4 - HKCU..\Run: [RGSC] C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe (Take-Two Interactive Software, Inc.) O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll (Google Inc.) O9 - Extra Button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll (Kaspersky Lab) O13 - gopher Prefix: missing O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedi...director/sw.cab (Shockwave ActiveX Control) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 91.195.232.72 91.195.232.73 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1.0\r3hook.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\r3hook.dll (Kaspersky Lab) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\klogon: DllName - C:\Windows\system32\klogon.dll - C:\Windows\System32\klogon.dll (Kaspersky Lab) O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img36.jpg O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img36.jpg O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-09-18 22:43:36 \| 000,000,024 \| ---- \| M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2011-01-28 22:37:20 \| 000,000,051 \| RHS- \| M] () - E:\autorun.inf -- [ NTFS ] O33 - MountPoints2\{3cdbe5a6-c6bf-11dd-95b6-001fc6e73e6e}\Shell\AutoRun\command - "" = iqosrtk.bat O33 - MountPoints2\{3cdbe5a6-c6bf-11dd-95b6-001fc6e73e6e}\Shell\explore\Command - "" = iqosrtk.bat O33 - MountPoints2\{3cdbe5a6-c6bf-11dd-95b6-001fc6e73e6e}\Shell\open\Command - "" = iqosrtk.bat O33 - MountPoints2\{3cdbe5b1-c6bf-11dd-95b6-001fc6e73e6e}\Shell\AutoRun\command - "" = E:\e.cmd O33 - MountPoints2\{3cdbe5b1-c6bf-11dd-95b6-001fc6e73e6e}\Shell\explore\Command - "" = E:\e.cmd O33 - MountPoints2\{3cdbe5b1-c6bf-11dd-95b6-001fc6e73e6e}\Shell\open\Command - "" = E:\e.cmd O33 - MountPoints2\{3ebe7f46-45cf-11de-8b03-001fc6e73e6e}\Shell - "" = AutoRun O33 - MountPoints2\{3ebe7f46-45cf-11de-8b03-001fc6e73e6e}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a O33 - MountPoints2\{3ebe7f4e-45cf-11de-8b03-001fc6e73e6e}\Shell\AutoRun\command - "" = F:\driver\usb\–Ľ‡‘Š•†‘Í€ŚŽ O33 - MountPoints2\{3ebe7f4e-45cf-11de-8b03-001fc6e73e6e}\Shell\open\command - "" = F:\driver\usb\–Ľ‡‘Š•†‘Í€ŚŽ O33 - MountPoints2\{6993fbed-2fd9-11de-a5d2-00221560ec4d}\Shell\AutoRun\command - "" = F:\ntde1ect.com O33 - MountPoints2\{6993fbed-2fd9-11de-a5d2-00221560ec4d}\Shell\explore\Command - "" = F:\ntde1ect.com O33 - MountPoints2\{6993fbed-2fd9-11de-a5d2-00221560ec4d}\Shell\open\Command - "" = F:\ntde1ect.com O33 - MountPoints2\{6c4a73c3-4556-11de-bb39-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{6c4a73c3-4556-11de-bb39-806e6f6e6963}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a O33 - MountPoints2\{6c4a73c4-4556-11de-bb39-806e6f6e6963}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe O33 - MountPoints2\{6d52dcb9-d2a1-11de-a054-001fc6e73e6e}\Shell\AutoRun\command - "" = F:\qbr2q.exe O33 - MountPoints2\{6d52dcb9-d2a1-11de-a054-001fc6e73e6e}\Shell\open\Command - "" = F:\qbr2q.exe O33 - MountPoints2\{782766c0-ee06-11de-a4ce-001fc6e73e6e}\Shell\AutoRun\command - "" = F:\qkm.exe O33 - MountPoints2\{782766c0-ee06-11de-a4ce-001fc6e73e6e}\Shell\open\Command - "" = F:\qkm.exe O33 - MountPoints2\{82f01116-ce1c-11dd-a9db-001f3c623ad9}\Shell\AutoRun\command - "" = F:\ba.exe O33 - MountPoints2\{82f01116-ce1c-11dd-a9db-001f3c623ad9}\Shell\open\Command - "" = F:\ba.exe O33 - MountPoints2\{940e77dd-9a9a-11dd-92b0-001fc6e73e6e}\Shell\1\Command - "" = .\recycled\info.exe O33 - MountPoints2\{940e77dd-9a9a-11dd-92b0-001fc6e73e6e}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL .\recycled\info.exe O33 - MountPoints2\{9a9c900d-a347-11dd-a106-001fc6e73e6e}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL G:\wOEey.ExE O33 - MountPoints2\{c449b23b-da0a-11df-bfa6-00221560ec4d}\Shell\AutoRun\command - "" = F:\ba.exe O33 - MountPoints2\{c449b23b-da0a-11df-bfa6-00221560ec4d}\Shell\open\Command - "" = F:\ba.exe O33 - MountPoints2\{f1c88e5a-59a2-11de-8018-001f3c623ad9}\Shell\AutoRun\command - "" = F:\fsaht.cmd O33 - MountPoints2\{f1c88e5a-59a2-11de-8018-001f3c623ad9}\Shell\open\Command - "" = F:\fsaht.cmd O33 - MountPoints2\{f1c88e94-59a2-11de-8018-001f3c623ad9}\Shell\AutoRun\command - "" = F:\fsaht.cmd O33 - MountPoints2\{f1c88e94-59a2-11de-8018-001f3c623ad9}\Shell\open\Command - "" = F:\fsaht.cmd O33 - MountPoints2\{f3121e8b-4d0a-11de-88ab-001fc6e73e6e}\Shell\AutoRun\command - "" = F:\ba.exe O33 - MountPoints2\{f3121e8b-4d0a-11de-88ab-001fc6e73e6e}\Shell\open\Command - "" = F:\ba.exe O33 - MountPoints2\{f89fbf87-4772-11de-87e1-00221560ec4d}\Shell - "" = AutoRun O33 - MountPoints2\{f89fbf87-4772-11de-87e1-00221560ec4d}\Shell\AutoRun\command - "" = F:\setup.exe AUTORUN=1 O33 - MountPoints2\H\Shell - "" = AutoRun O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a O34 - HKLM BootExecute: (autocheck autochk ) - File not found O35 - HKLM\..comfile [open] -- "%1" % O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011-01-28 23:06:39 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Kaspersky Lab [2011-01-28 23:06:39 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Kaspersky Lab [2011-01-28 23:06:39 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus 6.0 [2011-01-28 23:06:14 \| 000,115,992 \| ---- \| C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys [2011-01-28 23:05:23 \| 000,000,000 \| ---D \| C] -- C:\KAV [2011-01-28 21:06:00 \| 000,000,000 \| ---D \| C] -- C:\Users\tomek\AppData\Roaming\Malwarebytes [2011-01-28 21:05:54 \| 000,038,224 \| ---- \| C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2011-01-28 21:05:54 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2011-01-28 21:05:53 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Malwarebytes [2011-01-28 21:05:50 \| 000,020,952 \| ---- \| C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2011-01-28 21:05:50 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Malwarebytes' Anti-Malware [2011-01-12 19:48:49 \| 000,413,696 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll [2011-01-12 19:48:41 \| 001,169,408 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe [2011-01-05 01:04:09 \| 000,000,000 \| ---D \| C] -- C:\Users\tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Caminova [2011-01-05 01:04:08 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Caminova [2011-01-01 00:35:23 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ortalion Ent [2011-01-01 00:35:22 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Ortalion Entertainment [2010-12-30 00:03:57 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PRO100 Demo [2010-12-30 00:03:37 \| 000,000,000 \| ---D \| C] -- C:\Program Files\PRO100 Demo [2009-01-25 19:08:00 \| 000,075,200 \| ---- \| C] (C. Ghisler & Co.) -- C:\Program Files\TCMADMIN.EXE [2008-10-13 03:42:24 \| 000,005,632 \| ---- \| C] ( ) -- C:\Windows\System32\drivers\kbfiltr.sys [2 C:\Users\tomek\Desktop\.tmp files C:\Users\tomek\Desktop\.tmp ] [1 C:\Windows\.tmp files C:\Windows\.tmp ] ========== Files - Modified Within 30 Days ========== [2011-01-28 23:52:57 \| 000,481,312 \| -HS- \| M] () -- C:\Windows\System32\drivers\fidbox.dat [2011-01-28 23:50:00 \| 000,001,036 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011-01-28 23:10:43 \| 000,223,663 \| ---- \| M] () -- C:\ProgramData\nvModes.dat [2011-01-28 23:10:43 \| 000,223,663 \| ---- \| M] () -- C:\ProgramData\nvModes.001 [2011-01-28 23:10:12 \| 000,001,032 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011-01-28 23:10:11 \| 000,003,616 \| -H-- \| M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011-01-28 23:10:10 \| 000,003,616 \| -H-- \| M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011-01-28 23:09:51 \| 000,067,584 \| --S- \| M] () -- C:\Windows\bootstat.dat [2011-01-28 23:09:07 \| 000,002,036 \| -HS- \| M] () -- C:\Windows\System32\drivers\fidbox.idx [2011-01-28 23:08:49 \| 000,001,076 \| ---- \| M] () -- C:\Windows\bthservsdp.dat [2011-01-28 23:07:55 \| 000,074,396 \| ---- \| M] () -- C:\Windows\System32\drivers\klin.dat [2011-01-28 23:07:54 \| 000,075,932 \| ---- \| M] () -- C:\Windows\System32\drivers\klick.dat [2011-01-28 23:06:14 \| 000,115,992 \| ---- \| M] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys [2011-01-28 21:05:54 \| 000,000,913 \| ---- \| M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011-01-28 19:41:33 \| 000,063,824 \| ---- \| M] () -- C:\Users\tomek\Desktop\APARAT.jpg [2011-01-28 19:41:00 \| 000,675,488 \| ---- \| M] () -- C:\Windows\System32\perfh015.dat [2011-01-28 19:41:00 \| 000,598,900 \| ---- \| M] () -- C:\Windows\System32\perfh009.dat [2011-01-28 19:41:00 \| 000,131,772 \| ---- \| M] () -- C:\Windows\System32\perfc015.dat [2011-01-28 19:41:00 \| 000,104,914 \| ---- \| M] () -- C:\Windows\System32\perfc009.dat [2011-01-28 15:26:37 \| 000,065,024 \| ---- \| M] () -- C:\Users\tomek\Desktop\kody okolic Białegostoku.xls [2011-01-28 08:00:29 \| 000,016,692 \| ---- \| M] () -- C:\Users\tomek\Desktop\Moja PRaca Licencjacka.docx [2011-01-27 20:32:08 \| 000,068,608 \| ---- \| M] () -- C:\Users\tomek\Desktop\Akwaria cennik-10.doc [2011-01-27 15:05:25 \| 000,047,722 \| ---- \| M] () -- C:\Users\tomek\Desktop\Demot.jpg [2011-01-27 14:09:58 \| 000,008,592 \| ---- \| M] () -- C:\Users\tomek\AppData\Local\d3d9caps.dat [2011-01-24 12:06:28 \| 000,069,819 \| ---- \| M] () -- C:\Users\tomek\Documents\Bez nazwy 1 kopia.jpg [2011-01-24 01:59:27 \| 000,294,912 \| ---- \| M] () -- C:\Users\tomek\Desktop\ROZWÓJ PRZESTRZENNY GMINY MIEJSCIEJ.doc [2011-01-23 20:04:43 \| 002,359,350 \| ---- \| M] () -- C:\Users\tomek\Desktop\de_rats4_final0003.bmp [2011-01-22 17:45:46 \| 000,054,902 \| ---- \| M] () -- C:\Users\tomek\Desktop\Konflikt przestrzenny.docx [2011-01-21 12:09:08 \| 000,029,696 \| ---- \| M] () -- C:\Users\tomek\Desktop\cele, powody, badania2.doc [2011-01-21 12:09:08 \| 000,000,162 \| -H-- \| M] () -- C:\Users\tomek\Desktop\~$le, powody, badania2.doc [2011-01-21 12:08:53 \| 000,000,162 \| -H-- \| M] () -- C:\Users\tomek\Desktop\~$le, powody, badania.docx [2011-01-21 03:55:13 \| 000,014,732 \| ---- \| M] () -- C:\Users\tomek\Desktop\cele, powody, badania.docx [2011-01-20 17:17:42 \| 000,013,096 \| ---- \| M] () -- C:\Users\tomek\Desktop\tempdecal.wad [2011-01-20 17:04:43 \| 000,014,324 \| ---- \| M] () -- C:\Users\tomek\Desktop\RASTA.jpg [2011-01-20 03:02:54 \| 000,068,608 \| ---- \| M] () -- C:\Users\tomek\Documents\Konflikt przestrzenny.doc [2011-01-19 14:05:23 \| 000,131,072 \| RHS- \| M] () -- C:\Users\tomek\poiizuq.exe [2011-01-18 00:06:41 \| 000,015,047 \| ---- \| M] () -- C:\Users\tomek\Desktop\bankowość tir dzienni.docx [2011-01-14 03:04:23 \| 000,000,127 \| ---- \| M] () -- C:\Windows\System32\MRT.INI [2011-01-08 21:05:42 \| 000,043,520 \| ---- \| M] () -- C:\Users\tomek\Desktop\HOTELARSTWO W ZABYTKACH.doc [2011-01-07 18:15:12 \| 000,002,828 \| -HS- \| M] () -- C:\ProgramData\KGyGaAvL.sys [2011-01-07 17:52:54 \| 000,000,088 \| RHS- \| M] () -- C:\ProgramData\E43B7E1C69.sys [2011-01-05 12:02:19 \| 000,010,847 \| ---- \| M] () -- C:\Users\tomek\Desktop\Nadające się SPS.docx [2011-01-01 00:35:23 \| 000,001,096 \| ---- \| M] () -- C:\Users\tomek\Desktop\Żulionerzy NG.lnk [2010-12-30 00:03:57 \| 000,000,808 \| ---- \| M] () -- C:\Users\tomek\Desktop\PRO100 Demo.lnk [2 C:\Users\tomek\Desktop\.tmp files C:\Users\tomek\Desktop\.tmp ] [1 C:\Windows\.tmp files C:\Windows\.tmp ] ========== Files Created - No Company Name ========== [2011-01-28 23:07:55 \| 000,074,396 \| ---- \| C] () -- C:\Windows\System32\drivers\klin.dat [2011-01-28 23:07:54 \| 000,075,932 \| ---- \| C] () -- C:\Windows\System32\drivers\klick.dat [2011-01-28 23:06:26 \| 000,002,036 \| -HS- \| C] () -- C:\Windows\System32\drivers\fidbox.idx [2011-01-28 23:06:24 \| 000,442,400 \| -HS- \| C] () -- C:\Windows\System32\drivers\fidbox.dat [2011-01-28 21:05:54 \| 000,000,913 \| ---- \| C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011-01-28 19:41:32 \| 000,063,824 \| ---- \| C] () -- C:\Users\tomek\Desktop\APARAT.jpg [2011-01-28 15:26:35 \| 000,065,024 \| ---- \| C] () -- C:\Users\tomek\Desktop\kody okolic Białegostoku.xls [2011-01-28 08:00:27 \| 000,016,692 \| ---- \| C] () -- C:\Users\tomek\Desktop\Moja PRaca Licencjacka.docx [2011-01-27 20:32:05 \| 000,068,608 \| ---- \| C] () -- C:\Users\tomek\Desktop\Akwaria cennik-10.doc [2011-01-27 15:05:25 \| 000,047,722 \| ---- \| C] () -- C:\Users\tomek\Desktop\Demot.jpg [2011-01-24 12:06:24 \| 000,069,819 \| ---- \| C] () -- C:\Users\tomek\Documents\Bez nazwy 1 kopia.jpg [2011-01-23 20:04:42 \| 002,359,350 \| ---- \| C] () -- C:\Users\tomek\Desktop\de_rats4_final0003.bmp [2011-01-21 12:09:08 \| 000,000,162 \| -H-- \| C] () -- C:\Users\tomek\Desktop\~$le, powody, badania2.doc [2011-01-21 12:09:06 \| 000,029,696 \| ---- \| C] () -- C:\Users\tomek\Desktop\cele, powody, badania2.doc [2011-01-21 12:08:53 \| 000,000,162 \| -H-- \| C] () -- C:\Users\tomek\Desktop\~$le, powody, badania.docx [2011-01-21 03:55:12 \| 000,014,732 \| ---- \| C] () -- C:\Users\tomek\Desktop\cele, powody, badania.docx [2011-01-20 22:24:30 \| 000,054,902 \| ---- \| C] () -- C:\Users\tomek\Desktop\Konflikt przestrzenny.docx [2011-01-20 17:17:37 \| 000,013,096 \| ---- \| C] () -- C:\Users\tomek\Desktop\tempdecal.wad [2011-01-20 17:04:40 \| 000,014,324 \| ---- \| C] () -- C:\Users\tomek\Desktop\RASTA.jpg [2011-01-20 03:02:53 \| 000,068,608 \| ---- \| C] () -- C:\Users\tomek\Documents\Konflikt przestrzenny.doc [2011-01-19 14:05:23 \| 000,131,072 \| RHS- \| C] () -- C:\Users\tomek\poiizuq.exe [2011-01-18 05:29:13 \| 000,294,912 \| ---- \| C] () -- C:\Users\tomek\Desktop\ROZWÓJ PRZESTRZENNY GMINY MIEJSCIEJ.doc [2011-01-18 00:06:40 \| 000,015,047 \| ---- \| C] () -- C:\Users\tomek\Desktop\bankowość tir dzienni.docx [2011-01-08 21:05:41 \| 000,043,520 \| ---- \| C] () -- C:\Users\tomek\Desktop\HOTELARSTWO W ZABYTKACH.doc [2011-01-05 12:02:17 \| 000,010,847 \| ---- \| C] () -- C:\Users\tomek\Desktop\Nadające się SPS.docx [2011-01-01 00:35:23 \| 000,001,096 \| ---- \| C] () -- C:\Users\tomek\Desktop\Żulionerzy NG.lnk [2010-12-30 00:03:57 \| 000,000,808 \| ---- \| C] () -- C:\Users\tomek\Desktop\PRO100 Demo.lnk [2010-10-28 07:28:08 \| 000,005,046 \| ---- \| C] () -- C:\Windows\wininit.ini [2010-10-14 01:36:44 \| 000,179,263 \| ---- \| C] () -- C:\Windows\System32\xlive.dll.cat [2010-09-13 18:38:49 \| 000,002,828 \| -HS- \| C] () -- C:\ProgramData\KGyGaAvL.sys [2010-09-13 18:38:49 \| 000,000,088 \| RHS- \| C] () -- C:\ProgramData\E43B7E1C69.sys [2010-04-07 13:39:34 \| 000,000,008 \| ---- \| C] () -- C:\Users\tomek\AppData\Roaming\jasltw.dat [2010-03-24 12:52:32 \| 000,223,663 \| ---- \| C] () -- C:\ProgramData\nvModes.dat [2010-03-24 12:52:32 \| 000,223,663 \| ---- \| C] () -- C:\ProgramData\nvModes.001 [2010-03-07 21:21:14 \| 000,691,696 \| ---- \| C] () -- C:\Windows\System32\drivers\sptd.sys [2010-02-11 03:03:37 \| 000,000,127 \| ---- \| C] () -- C:\Windows\System32\MRT.INI [2009-10-20 04:36:21 \| 000,117,248 \| ---- \| C] () -- C:\Windows\System32\EhStorAuthn.dll [2009-10-12 19:14:39 \| 000,110,592 \| ---- \| C] () -- C:\Windows\System32\FsUsbExDevice.Dll [2009-10-12 19:14:39 \| 000,036,608 \| ---- \| C] () -- C:\Windows\System32\FsUsbExDisk.Sys [2009-08-01 17:57:33 \| 000,000,025 \| ---- \| C] () -- C:\Windows\cdplayer.ini [2009-02-04 21:29:29 \| 000,000,056 \| -H-- \| C] () -- C:\ProgramData\ezsidmv.dat [2009-01-25 19:08:00 \| 000,003,516 \| ---- \| C] () -- C:\Program Files\REGISTER.RTF [2009-01-25 19:08:00 \| 000,001,568 \| ---- \| C] () -- C:\Program Files\WCMICONS.INC [2008-12-31 12:16:48 \| 000,008,592 \| ---- \| C] () -- C:\Users\tomek\AppData\Local\d3d9caps.dat [2008-12-19 23:32:19 \| 000,165,376 \| ---- \| C] () -- C:\Windows\System32\unrar.dll [2008-12-19 23:32:18 \| 000,000,038 \| ---- \| C] () -- C:\Windows\avisplitter.ini [2008-12-19 23:32:16 \| 000,881,664 \| ---- \| C] () -- C:\Windows\System32\xvidcore.dll [2008-12-19 23:32:16 \| 000,159,839 \| ---- \| C] () -- C:\Windows\System32\xvidvfw.dll [2008-12-19 23:32:15 \| 003,596,288 \| ---- \| C] () -- C:\Windows\System32\qt-dx331.dll [2008-12-19 23:32:13 \| 000,007,680 \| ---- \| C] () -- C:\Windows\System32\ff_vfw.dll [2008-11-30 13:51:49 \| 000,112,688 \| ---- \| C] () -- C:\Windows\System32\shw32.dll [2008-11-27 16:30:45 \| 000,138,464 \| ---- \| C] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2008-11-27 16:30:44 \| 000,022,328 \| ---- \| C] () -- C:\Users\tomek\AppData\Roaming\PnkBstrK.sys [2008-10-18 21:03:40 \| 000,098,397 \| ---- \| C] () -- C:\Users\tomek\AppData\Roaming\nvModes.001 [2008-10-18 19:42:49 \| 000,098,397 \| ---- \| C] () -- C:\Users\tomek\AppData\Roaming\nvModes.dat [2008-10-13 03:43:17 \| 001,769,984 \| ---- \| C] () -- C:\Windows\System32\drivers\snp2uvc.sys [2008-10-13 03:43:17 \| 000,028,160 \| ---- \| C] () -- C:\Windows\System32\drivers\sncduvc.sys [2008-10-12 22:05:09 \| 000,049,664 \| ---- \| C] () -- C:\Users\tomek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008-10-12 21:51:54 \| 000,106,496 \| R--- \| C] () -- C:\Windows\System32\vshp1018.dll [2008-10-07 09:13:30 \| 000,197,912 \| ---- \| C] () -- C:\Windows\System32\physxcudart_20.dll [2008-10-07 09:13:22 \| 000,058,648 \| ---- \| C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll [2008-10-07 09:13:20 \| 000,058,648 \| ---- \| C] () -- C:\Windows\System32\AgCPanelSwedish.dll [2008-10-07 09:13:20 \| 000,058,648 \| ---- \| C] () -- C:\Windows\System32\AgCPanelSpanish.dll [2008-10-07 09:13:20 \| 000,058,648 \| ---- \| C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll [2008-10-07 09:13:20 \| 000,058,648 \| ---- \| C] () -- C:\Windows\System32\AgCPanelPortugese.dll [2008-10-07 09:13:20 \| 000,058,648 \| ---- \| C] () -- C:\Windows\System32\AgCPanelKorean.dll [2008-10-07 09:13:20 \| 000,058,648 \| ---- \| C] () -- C:\Windows\System32\AgCPanelJapanese.dll [2008-10-07 09:13:20 \| 000,058,648 \| ---- \| C] () -- C:\Windows\System32\AgCPanelGerman.dll [2008-10-07 09:13:20 \| 000,058,648 \| ---- \| C] () -- C:\Windows\System32\AgCPanelFrench.dll [2008-04-18 00:45:31 \| 000,000,010 \| ---- \| C] () -- C:\Windows\System32\ABLKSR.ini [2007-10-25 16:26:10 \| 000,005,632 \| ---- \| C] () -- C:\Windows\System32\drivers\StarOpen.sys [2006-11-02 13:35:32 \| 000,005,632 \| ---- \| C] () -- C:\Windows\System32\sysprepMCE.dll [2006-11-02 08:40:29 \| 000,013,750 \| ---- \| C] () -- C:\Windows\System32\pacerprf.ini [1996-04-03 20:33:26 \| 000,005,248 \| ---- \| C] () -- C:\Windows\System32\giveio.sys < End of report >

@Blade@

Pomógł: 8 razy

Wysłany: 2011-01-29, 18:21

A co z logiem z GMER???

Infekcja jest i już się za nią bierzemy.

Odinstaluj toolbary: DAEMON Tools Toolbar, Softonic-Polska Toolbar

Z podłączonymi pamięciami przenośnymi użyj UsbFix z opcji Deletion i podaj utworzony log.

Uruchom OTL

w oknie Własne opcje skanowania/skrypt wklej:

Cytat:

:OTL
PRC - [2011-01-19 14:05:23 | 000,131,072 | RHS- | M] () -- C:\Users\tomek\poiizuq.exe
SRV - File not found [Auto | Stopped] -- -- (SymAppCore)
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com...&ctid=CT2530240
FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.defaultthis.engineName: "Softonic-Polska Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2530240&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=937811"
FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.1.0014
FF - prefs.js..extensions.enabledItems: youtubedownloader@mybrowserbar.com:4.1
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2530240&q="
[2010-02-18 14:18:32 | 000,000,000 | ---D | M] (Softonic-Polska Toolbar) -- C:\Users\tomek\AppData\Roaming\mozilla\Firefox\Profiles\e2h9sfha.default\extensions\{c86eb8a9-ccc2-4b6c-b75d-73576ed591bf}
[2010-03-07 21:22:36 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Users\tomek\AppData\Roaming\mozilla\Firefox\Profiles\e2h9sfha.default\extensions\DTToolbar@toolbarnet.com
[2010-02-09 17:25:50 | 000,000,933 | ---- | M] () -- C:\Users\tomek\AppData\Roaming\Mozilla\Firefox\Profiles\e2h9sfha.default\searchplugins\conduit.xml
[2010-03-07 21:22:13 | 000,002,055 | ---- | M] () -- C:\Users\tomek\AppData\Roaming\Mozilla\Firefox\Profiles\e2h9sfha.default\searchplugins\daemon-search.xml
[2009-04-28 11:20:47 | 000,009,895 | ---- | M] () -- C:\Users\tomek\AppData\Roaming\Mozilla\Firefox\Profiles\e2h9sfha.default\searchplugins\mywebsearch.xml
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [NPSStartup] File not found
O4 - HKCU..\Run: [poiizuq] C:\Users\tomek\poiizuq.exe ()
O32 - AutoRun File - [2011-01-28 22:37:20 | 000,000,051 | RHS- | M] () - E:\autorun.inf -- [ NTFS ]
[2010-04-07 13:39:34 | 000,000,008 | ---- | C] () -- C:\Users\tomek\AppData\Roaming\jasltw.dat

:Reg
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RGSC"=-
"swg"=-
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

:Commands
[clearallrestorepoints]
[emptytemp]

Klikasz Wykonaj skrypt. Dajesz log z usuwania + nowe logi z OTL.

_________________

apstrakcja

Wysłany: 2011-01-29, 22:41

dziekuje oto log z kasowania All processes killed ========== OTL ========== No active process named poiizuq.exe was found! Error: No service named SymAppCore was found to stop! Service\Driver key SymAppCore not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page\| /E : value set successfully! Prefs.js: "Yahoo" removed from browser.search.defaultenginename Prefs.js: "Softonic-Polska Customized Web Search" removed from browser.search.defaultthis.engineName Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2530240&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl Prefs.js: "chr-greentree_ff&type=937811" removed from browser.search.param.yahoo-fr Prefs.js: DTToolbar@toolbarnet.com:1.1.1.0014 removed from extensions.enabledItems Prefs.js: youtubedownloader@mybrowserbar.com:4.1 removed from extensions.enabledItems Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2530240&q=" removed from keyword.URL Folder C:\Users\tomek\AppData\Roaming\mozilla\Firefox\Profiles\e2h9sfha.default\extensions\{c86eb8a9-ccc2-4b6c-b75d-73576ed591bf}\ not found. Folder C:\Users\tomek\AppData\Roaming\mozilla\Firefox\Profiles\e2h9sfha.default\extensions\DTToolbar@toolbarnet.com\ not found. File C:\Users\tomek\AppData\Roaming\Mozilla\Firefox\Profiles\e2h9sfha.default\searchplugins\conduit.xml not found. File C:\Users\tomek\AppData\Roaming\Mozilla\Firefox\Profiles\e2h9sfha.default\searchplugins\daemon-search.xml not found. File C:\Users\tomek\AppData\Roaming\Mozilla\Firefox\Profiles\e2h9sfha.default\searchplugins\mywebsearch.xml not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\poiizuq not found. File C:\Users\tomek\poiizuq.exe not found. Folder move failed. E:\Autorun.inf scheduled to be moved on reboot. File C:\Users\tomek\AppData\Roaming\jasltw.dat not found. ========== REGISTRY ========== Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\RGSC not found. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\swg not found. Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints 2\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public User: tomek ->Temp folder emptied: 38789 bytes ->Temporary Internet Files folder emptied: 318489499 bytes ->Java cache emptied: 6734666 bytes ->FireFox cache emptied: 58129931 bytes ->Flash cache emptied: 612717 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 77403120 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 440,00 mb OTL by OldTimer - Version 3.2.20.6 log created on 01292011_221442 Files\Folders moved on Reboot... Folder move failed. E:\Autorun.inf scheduled to be moved on reboot. Registry entries deleted on Reboot... zaraz podam z pelnego skanowania oraz z gimera [ Dodano: 2011-01-30, 00:15 ] OTL logfile created on: 2011-01-29 23:43:53 - Run 3 OTL by OldTimer - Version 3.2.20.6 Folder = c:\Users\tomek\Downloads Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 7.0.6002.18005) Locale: 00000415 \| Country: Polska \| Language: PLK \| Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory \| 2,00 Gb Available Physical Memory \| 52,00% Memory free 6,00 Gb Paging File \| 5,00 Gb Available in Paging File \| 73,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files Drive C: \| 206,79 Gb Total Space \| 21,23 Gb Free Space \| 10,27% Space Free \| Partition Type: NTFS Drive E: \| 81,54 Gb Total Space \| 81,44 Gb Free Space \| 99,88% Space Free \| Partition Type: NTFS Computer Name: TOMEK-PC \| User Name: tomek \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: Current user Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011-01-28 23:50:03 \| 000,602,624 \| ---- \| M] (OldTimer Tools) -- c:\Users\tomek\Downloads\OTL.exe PRC - [2010-12-16 06:19:28 \| 012,984,928 \| ---- \| M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe PRC - [2010-10-05 20:26:46 \| 000,129,720 \| ---- \| M] (Kaspersky Lab ZAO) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtblfs.exe PRC - [2010-07-04 18:13:56 \| 000,095,576 \| ---- \| M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe PRC - [2010-07-04 18:07:40 \| 000,238,952 \| ---- \| M] (Teruten) -- C:\Windows\System32\FsUsbExService.Exe PRC - [2010-03-24 13:20:19 \| 000,910,296 \| ---- \| M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-04-11 07:27:36 \| 002,926,592 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009-01-28 08:39:02 \| 000,185,640 \| ---- \| M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe PRC - [2007-12-26 22:38:32 \| 000,297,528 \| ---- \| M] (ASUS) -- C:\Program Files\ASUS\SmartLogon\sensorsrv.exe PRC - [2007-11-30 19:20:44 \| 000,051,768 \| ---- \| M] () -- C:\Program Files\ASUS\ASUS Live Update\ALU.exe PRC - [2007-10-17 00:24:32 \| 000,229,376 \| ---- \| M] (ATK0100) -- C:\Program Files\ATK Hotkey\HControl.exe PRC - [2007-10-03 05:53:00 \| 000,094,208 \| ---- \| M] () -- C:\Program Files\ATK Hotkey\AsLdrSrv.exe PRC - [2007-09-26 19:24:12 \| 000,147,456 \| ---- \| M] () -- C:\Program Files\ASUS\ASUS CopyProtect\ASPG.exe PRC - [2007-08-15 19:38:30 \| 000,147,456 \| ---- \| M] () -- C:\Program Files\ATK Hotkey\WDC.exe PRC - [2007-08-15 19:20:16 \| 000,106,496 \| ---- \| M] () -- C:\Program Files\ATK Hotkey\KBFiltr.exe PRC - [2007-08-08 19:03:42 \| 002,441,216 \| ---- \| M] () -- C:\Program Files\ATK Hotkey\ATKOSD.exe PRC - [2007-08-08 08:08:40 \| 000,094,208 \| ---- \| M] () -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe PRC - [2007-08-03 20:24:54 \| 000,125,496 \| ---- \| M] () -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe PRC - [2007-07-24 10:15:14 \| 000,185,632 \| ---- \| M] (Protexis Inc.) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe PRC - [2007-07-06 00:53:44 \| 001,040,384 \| ---- \| M] () -- C:\Program Files\Wireless Console 2\wcourier.exe PRC - [2007-05-18 10:31:16 \| 000,073,728 \| ---- \| M] () -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe PRC - [2007-05-04 01:32:52 \| 000,961,024 \| ---- \| M] (Ares Development Group) -- C:\Program Files\Ares\Ares.exe PRC - [2006-03-14 01:41:56 \| 000,081,920 \| ---- \| M] (Valve) -- C:\Users\tomek\Desktop\Counter-Strike 1.6\hl.exe ========== Modules (SafeList) ========== MOD - [2011-01-28 23:50:03 \| 000,602,624 \| ---- \| M] (OldTimer Tools) -- c:\Users\tomek\Downloads\OTL.exe MOD - [2010-08-31 16:43:52 \| 001,686,016 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll ========== Win32 Services (SafeList) ========== SRV - [2010-11-02 22:06:06 \| 000,365,336 \| ---- \| M] (Kaspersky Lab ZAO) [Auto \| Stopped] -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe -- (AVP) SRV - [2010-07-04 18:07:40 \| 000,238,952 \| ---- \| M] (Teruten) [Auto \| Running] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService) SRV - [2010-03-18 13:16:28 \| 000,753,504 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400) SRV - [2010-03-18 13:16:28 \| 000,130,384 \| ---- \| M] (Microsoft Corporation) [Auto \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-09-25 02:27:04 \| 000,793,088 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\System32\FntCache.dll -- (FontCache) SRV - [2009-08-24 12:36:45 \| 000,377,344 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- winhttp.dll -- (WinHttpAutoProxySvc) SRV - [2009-01-28 08:39:02 \| 000,185,640 \| ---- \| M] (TeamViewer GmbH) [Auto \| Running] -- C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe -- (TeamViewer4) SRV - [2008-04-07 08:17:30 \| 000,430,592 \| ---- \| M] (Nokia.) [On_Demand \| Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2008-01-21 03:23:32 \| 000,272,952 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2007-10-03 05:53:00 \| 000,094,208 \| ---- \| M] () [Auto \| Running] -- C:\Program Files\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService) SRV - [2007-08-08 08:08:40 \| 000,094,208 \| ---- \| M] () [Auto \| Running] -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv) SRV - [2007-08-03 20:24:54 \| 000,125,496 \| ---- \| M] () [Auto \| Running] -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe -- (spmgr) SRV - [2007-07-24 10:15:14 \| 000,185,632 \| ---- \| M] (Protexis Inc.) [Auto \| Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2) SRV - [2007-05-18 10:31:16 \| 000,073,728 \| ---- \| M] () [Auto \| Running] -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService) SRV - [2007-03-20 02:19:14 \| 000,263,168 \| ---- \| M] (Ares Development Group) [On_Demand \| Stopped] -- C:\Program Files\Ares\chatServer.exe -- (AresChatServer) ========== Driver Services (SafeList) ========== DRV - [2011-01-29 18:03:19 \| 000,488,536 \| ---- \| M] (Kaspersky Lab) [File_System \| System \| Running] -- C:\Windows\System32\drivers\klif.sys -- (KLIF) DRV - [2010-06-14 08:32:54 \| 000,036,608 \| ---- \| M] () [Kernel \| On_Demand \| Running] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk) DRV - [2010-06-09 16:43:52 \| 000,011,352 \| ---- \| M] (Kaspersky Lab ZAO) [Kernel \| System \| Running] -- C:\Windows\System32\drivers\kl2.sys -- (kl2) DRV - [2010-06-09 16:43:50 \| 000,132,184 \| ---- \| M] (Kaspersky Lab ZAO) [Kernel \| Boot \| Running] -- C:\Windows\system32\DRIVERS\kl1.sys -- (KL1) DRV - [2010-04-27 03:25:16 \| 000,123,648 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\ss_bmdm.sys -- (ss_bmdm) DRV - [2010-04-27 03:25:16 \| 000,098,432 \| ---- \| M] (MCCI) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM) DRV - [2010-04-27 03:25:16 \| 000,014,848 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter) DRV - [2010-04-22 18:07:34 \| 000,022,104 \| ---- \| M] (Kaspersky Lab ZAO) [Kernel \| System \| Running] -- C:\Windows\System32\drivers\klim6.sys -- (KLIM6) DRV - [2010-03-07 21:21:15 \| 000,691,696 \| ---- \| M] () [Kernel \| Boot \| Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd) DRV - [2009-11-21 03:34:54 \| 011,515,752 \| ---- \| M] (NVIDIA Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2009-11-02 19:27:16 \| 000,019,984 \| ---- \| M] (Kaspersky Lab) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\klmouflt.sys -- (klmouflt) DRV - [2009-03-28 20:47:33 \| 000,025,280 \| ---- \| M] (LogMeIn, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi) DRV - [2008-01-21 03:23:27 \| 000,386,616 \| ---- \| M] (LSI Corporation, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\megasr.sys -- (MegaSR) DRV - [2008-01-21 03:23:27 \| 000,149,560 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320) DRV - [2008-01-21 03:23:27 \| 000,031,288 \| ---- \| M] (LSI Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas) DRV - [2008-01-21 03:23:26 \| 000,101,432 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m) DRV - [2008-01-21 03:23:26 \| 000,074,808 \| ---- \| M] (Silicon Integrated Systems) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4) DRV - [2008-01-21 03:23:26 \| 000,040,504 \| ---- \| M] (Hewlett-Packard Company) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs) DRV - [2008-01-21 03:23:25 \| 000,300,600 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci) DRV - [2008-01-21 03:23:25 \| 000,089,656 \| ---- \| M] (LSI Logic) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS) DRV - [2008-01-21 03:23:24 \| 001,122,360 \| ---- \| M] (QLogic Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300) DRV - [2008-01-21 03:23:24 \| 000,118,784 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel(R) DRV - [2008-01-21 03:23:24 \| 000,079,928 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas) DRV - [2008-01-21 03:23:23 \| 000,235,064 \| ---- \| M] (Intel Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV) DRV - [2008-01-21 03:23:23 \| 000,130,616 \| ---- \| M] (VIA Technologies Inc.,Ltd) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid) DRV - [2008-01-21 03:23:23 \| 000,115,816 \| ---- \| M] (Promise Technology, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2) DRV - [2008-01-21 03:23:23 \| 000,096,312 \| ---- \| M] (LSI Logic) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI) DRV - [2008-01-21 03:23:23 \| 000,096,312 \| ---- \| M] (LSI Logic) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC) DRV - [2008-01-21 03:23:23 \| 000,079,416 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc) DRV - [2008-01-21 03:23:22 \| 000,342,584 \| ---- \| M] (Emulex) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor) DRV - [2008-01-21 03:23:21 \| 000,422,968 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx) DRV - [2008-01-21 03:23:21 \| 000,102,968 \| ---- \| M] (NVIDIA Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid) DRV - [2008-01-21 03:23:21 \| 000,045,112 \| ---- \| M] (NVIDIA Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor) DRV - [2008-01-21 03:23:20 \| 002,225,664 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\NETw3v32.sys -- (NETw3v32) Intel(R) DRV - [2008-01-21 03:23:20 \| 000,238,648 \| ---- \| M] (ULi Electronics Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci) DRV - [2008-01-21 03:23:00 \| 000,020,024 \| ---- \| M] (VIA Technologies, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide) DRV - [2008-01-21 03:23:00 \| 000,019,000 \| ---- \| M] (CMD Technology, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide) DRV - [2008-01-21 03:23:00 \| 000,017,464 \| ---- \| M] (Acer Laboratories Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide) DRV - [2007-10-31 12:56:00 \| 000,046,592 \| ---- \| M] (Atheros Communications, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\l160x86.sys -- (AtcL001) DRV - [2007-10-01 07:59:46 \| 001,769,984 \| ---- \| M] () [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC) DRV - [2007-09-29 16:03:12 \| 000,308,248 \| ---- \| M] (Intel Corporation) [Kernel \| Boot \| Running] -- C:\Windows\system32\DRIVERS\iaStor.sys -- (iaStor) DRV - [2007-09-26 23:03:42 \| 000,015,416 \| ---- \| M] (Windows (R) Codename Longhorn DDK provider) [File_System \| Boot \| Running] -- C:\Windows\system32\DRIVERS\lullaby.sys -- (lullaby) DRV - [2007-09-17 14:53:26 \| 000,021,632 \| ---- \| M] (Nokia) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2007-09-05 10:36:26 \| 001,953,944 \| ---- \| M] (Realtek Semiconductor Corp.) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\RTKVHDA.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2007-08-28 04:53:48 \| 001,019,136 \| ---- \| M] (Motorola Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\smserial.sys -- (smserial) DRV - [2007-08-11 04:19:26 \| 000,029,752 \| ---- \| M] (Windows (R) Codename Longhorn DDK provider) [File_System \| Boot \| Running] -- C:\Windows\System32\drivers\AsDsm.sys -- (AsDsm) DRV - [2007-08-08 13:42:08 \| 000,045,568 \| ---- \| M] (REDC) [Kernel \| Auto \| Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk) DRV - [2007-08-03 05:26:22 \| 000,020,936 \| ---- \| M] () [Kernel \| Auto \| Running] -- C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys -- (ghaio) DRV - [2007-07-30 04:54:02 \| 000,038,400 \| ---- \| M] (REDC) [Kernel \| Auto \| Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp) DRV - [2007-07-30 03:42:58 \| 000,043,008 \| ---- \| M] (REDC) [Kernel \| Auto \| Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk) DRV - [2007-07-24 19:09:04 \| 000,013,880 \| ---- \| M] () [Kernel \| Auto \| Running] -- C:\Program Files\ATKGFNEX\ASMMAP.sys -- (ASMMAP) DRV - [2007-06-20 21:51:28 \| 002,222,080 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\NETw4v32.sys -- (NETw4v32) Sterownik karty Intel(R) DRV - [2007-01-24 11:08:40 \| 000,005,632 \| ---- \| M] ( ) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr) DRV - [2006-12-22 20:05:34 \| 000,449,536 \| ---- \| M] (Atheros Communications, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\athrusb.sys -- (athrusb) DRV - [2006-12-14 08:11:58 \| 000,007,680 \| ---- \| M] (ATK0100) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor) DRV - [2006-11-02 10:50:35 \| 000,106,088 \| ---- \| M] (QLogic Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx) DRV - [2006-11-02 10:50:35 \| 000,098,408 \| ---- \| M] (Promise Technology, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata) DRV - [2006-11-02 10:50:19 \| 000,045,160 \| ---- \| M] (IBM Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960) DRV - [2006-11-02 10:50:17 \| 000,041,576 \| ---- \| M] (Intel Corp./ICP vortex GmbH) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp) DRV - [2006-11-02 10:50:11 \| 000,071,272 \| ---- \| M] (Adaptec, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx) DRV - [2006-11-02 10:50:09 \| 000,035,944 \| ---- \| M] (Integrated Technology Express, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid) DRV - [2006-11-02 10:50:07 \| 000,035,944 \| ---- \| M] (Integrated Technology Express, Inc.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi) DRV - [2006-11-02 10:50:05 \| 000,035,944 \| ---- \| M] (LSI Logic) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx) DRV - [2006-11-02 10:50:03 \| 000,034,920 \| ---- \| M] (LSI Logic) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3) DRV - [2006-11-02 10:49:59 \| 000,033,384 \| ---- \| M] (LSI Logic Corporation) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x) DRV - [2006-11-02 10:49:56 \| 000,031,848 \| ---- \| M] (LSI Logic) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi) DRV - [2006-11-02 09:25:24 \| 000,071,808 \| ---- \| M] (Brother Industries Ltd.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM) DRV - [2006-11-02 09:24:47 \| 000,011,904 \| ---- \| M] (Brother Industries Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer) DRV - [2006-11-02 09:24:46 \| 000,005,248 \| ---- \| M] (Brother Industries, Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp) DRV - [2006-11-02 09:24:45 \| 000,013,568 \| ---- \| M] (Brother Industries, Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo) DRV - [2006-11-02 09:24:44 \| 000,062,336 \| ---- \| M] (Brother Industries Ltd.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm) DRV - [2006-11-02 09:24:44 \| 000,012,160 \| ---- \| M] (Brother Industries Ltd.) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm) DRV - [2006-11-02 08:36:50 \| 000,020,608 \| ---- \| M] (N-trig Innovative Technologies) [Kernel \| Disabled \| Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi) DRV - [2006-11-02 08:30:56 \| 000,194,048 \| ---- \| M] (Marvell) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\yk60x86.sys -- (yukonwlh) DRV - [2006-09-24 14:28:46 \| 000,005,248 \| ---- \| M] (Windows (R) 2000 DDK provider) [Kernel \| Boot \| Running] -- C:\Windows\system32\speedfan.sys -- (speedfan) DRV - [1996-04-03 20:33:26 \| 000,005,248 \| ---- \| M] () [Kernel \| Boot \| Running] -- C:\Windows\system32\giveio.sys -- (giveio) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.google.pl/ [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = plimus.com,www.plimus.com,regnow.com,www.regnow.com, IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = socks= ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "" FF - prefs.js..browser.search.defaultthis.engineName: "" FF - prefs.js..browser.search.defaulturl: "" FF - prefs.js..browser.search.param.yahoo-fr: "" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Program Files\Real\RealPlayer\browserrecord [2009-08-26 16:02:48 \| 000,000,000 \| ---D \| M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.2pre\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-10-28 07:28:23 \| 000,000,000 \| ---D \| M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.2pre\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-01-05 01:04:15 \| 000,000,000 \| ---D \| M] [2008-10-18 10:54:53 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\tomek\AppData\Roaming\mozilla\Extensions [2011-01-29 22:08:05 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\tomek\AppData\Roaming\mozilla\Firefox\Profiles\e2h9sfha.default\extensions [2009-10-09 12:25:48 \| 000,000,000 \| ---D \| M] (Microsoft .NET Framework Assistant) -- C:\Users\tomek\AppData\Roaming\mozilla\Firefox\Profiles\e2h9sfha.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2009-02-01 23:48:09 \| 000,000,000 \| ---D \| M] (FoxGame) -- C:\Users\tomek\AppData\Roaming\mozilla\Firefox\Profiles\e2h9sfha.default\extensions\{b66bc4c3-6d25-4a10-8c59-01daa9063051} [2010-11-01 19:29:52 \| 000,000,000 \| ---D \| M] (Zrzuta.eu) -- C:\Users\tomek\AppData\Roaming\mozilla\Firefox\Profiles\e2h9sfha.default\extensions\zrzuta.eu@gmail.com [2011-01-29 18:48:13 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-01-29 18:48:14 \| 000,000,000 \| ---D \| M] (Kaspersky URL Advisor) -- C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru [2010-11-01 19:56:04 \| 000,000,000 \| ---D \| M] (Widgi Toolbar Platform) -- C:\PROGRAM FILES\COMMON FILES\SPIGOT\WTXPCOM [2009-08-26 16:02:48 \| 000,000,000 \| ---D \| M] (RealPlayer Browser Record Plugin) -- C:\PROGRAM FILES\REAL\REALPLAYER\BROWSERRECORD [2010-11-01 19:56:04 \| 000,000,000 \| ---D \| M] (YouTube Downloader Toolbar) -- C:\PROGRAM FILES\YOUTUBE DOWNLOADER TOOLBAR\FF [2010-03-12 14:42:31 \| 000,000,000 \| ---D \| M] ("Hide IP NG Add-on") -- C:\USERS\TOMEK\APPDATA\ROAMING\HIDE IP NG\FIREFOX_PLUGIN [2008-01-23 07:20:30 \| 000,491,520 \| ---- \| M] (BitComet) -- C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll [2010-11-18 17:44:16 \| 001,680,272 \| ---- \| M] (Caminova, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdjvu.dll [2010-03-15 14:13:57 \| 000,002,767 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2010-03-15 14:13:57 \| 000,001,406 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2010-03-15 14:13:57 \| 000,000,917 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2010-03-15 14:13:57 \| 000,000,858 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2010-03-15 14:13:57 \| 000,001,183 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2010-03-15 14:13:57 \| 000,001,683 \| ---- \| M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2006-09-18 22:41:30 \| 000,000,761 \| ---- \| M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\ievkbd.dll (Kaspersky Lab ZAO) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll (Google Inc.) O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll (Kaspersky Lab ZAO) O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - File not found O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O4 - HKLM..\Run: [avp] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe (Kaspersky Lab ZAO) O4 - HKCU..\Run: [ares] C:\Program Files\Ares\Ares.exe (Ares Development Group) O4 - HKCU..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.) O4 - HKCU..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 3 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll (Google Inc.) O9 - Extra Button: &Klawiatura wirtualna - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll (Kaspersky Lab ZAO) O9 - Extra Button: &Sprawdzanie adresów internetowych - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll (Kaspersky Lab ZAO) O13 - gopher Prefix: missing O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedi...director/sw.cab (Shockwave ActiveX Control) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 91.195.232.72 91.195.232.73 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\mzvkbd3.dll (Kaspersky Lab ZAO) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\klogon: DllName - C:\Windows\system32\klogon.dll - C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO) O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img36.jpg O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img36.jpg O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-09-18 22:43:36 \| 000,000,024 \| ---- \| M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2011-01-29 21:35:54 \| 000,000,000 \| RHSD \| M] - C:\Autorun.inf -- [ NTFS ] O32 - AutoRun File - [2011-01-29 21:35:54 \| 000,000,000 \| RHSD \| M] - E:\Autorun.inf -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk ) - File not found O35 - HKLM\..comfile [open] -- "%1" % O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011-01-29 21:54:42 \| 000,000,000 \| ---D \| C] -- C:\_OTL [2011-01-29 21:35:54 \| 000,000,000 \| RHSD \| C] -- C:\Autorun.inf [2011-01-29 21:20:08 \| 000,000,000 \| ---D \| C] -- C:\UsbFix [2011-01-29 18:06:10 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus 2011 [2011-01-29 18:03:51 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Kaspersky Lab [2011-01-29 18:03:19 \| 000,488,536 \| ---- \| C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys [2011-01-28 23:06:39 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Kaspersky Lab [2011-01-28 23:05:23 \| 000,000,000 \| ---D \| C] -- C:\KAV [2011-01-28 21:06:00 \| 000,000,000 \| ---D \| C] -- C:\Users\tomek\AppData\Roaming\Malwarebytes [2011-01-28 21:05:54 \| 000,038,224 \| ---- \| C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2011-01-28 21:05:54 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2011-01-28 21:05:53 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Malwarebytes [2011-01-28 21:05:50 \| 000,020,952 \| ---- \| C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2011-01-28 21:05:50 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Malwarebytes' Anti-Malware [2011-01-12 19:48:49 \| 000,413,696 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll [2011-01-12 19:48:41 \| 001,169,408 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe [2011-01-05 01:04:09 \| 000,000,000 \| ---D \| C] -- C:\Users\tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Caminova [2011-01-05 01:04:08 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Caminova [2011-01-01 00:35:23 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ortalion Ent [2011-01-01 00:35:22 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Ortalion Entertainment [2009-01-25 19:08:00 \| 000,075,200 \| ---- \| C] (C. Ghisler & Co.) -- C:\Program Files\TCMADMIN.EXE [2008-10-13 03:42:24 \| 000,005,632 \| ---- \| C] ( ) -- C:\Windows\System32\drivers\kbfiltr.sys [2 C:\Users\tomek\Desktop\.tmp files C:\Users\tomek\Desktop\.tmp ] ========== Files - Modified Within 30 Days ========== [2011-01-29 22:55:16 \| 000,223,663 \| ---- \| M] () -- C:\ProgramData\nvModes.dat [2011-01-29 22:55:16 \| 000,223,663 \| ---- \| M] () -- C:\ProgramData\nvModes.001 [2011-01-29 22:54:11 \| 000,001,032 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011-01-29 22:54:06 \| 000,003,616 \| -H-- \| M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011-01-29 22:54:06 \| 000,003,616 \| -H-- \| M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011-01-29 22:53:58 \| 000,067,584 \| --S- \| M] () -- C:\Windows\bootstat.dat [2011-01-29 22:53:47 \| 458,333,394 \| ---- \| M] () -- C:\Windows\MEMORY.DMP [2011-01-29 22:50:00 \| 000,001,036 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011-01-29 22:42:52 \| 000,069,938 \| ---- \| M] () -- C:\Users\tomek\Desktop\gmer.jpg [2011-01-29 22:19:31 \| 000,001,076 \| ---- \| M] () -- C:\Windows\bthservsdp.dat [2011-01-29 21:40:28 \| 000,040,360 \| ---- \| M] () -- C:\Users\tomek\Desktop\Usbfix.jpg [2011-01-29 21:39:33 \| 799,958,232 \| ---- \| M] () -- C:\UsbFix_Upload_Me_TOMEK-PC.zip [2011-01-29 18:54:21 \| 000,032,931 \| ---- \| M] () -- C:\Users\tomek\Desktop\autorun.jpg [2011-01-29 18:14:16 \| 000,002,489 \| ---- \| M] () -- C:\Users\Public\Desktop\Skype.lnk [2011-01-29 18:05:44 \| 000,114,243 \| ---- \| M] () -- C:\Windows\System32\drivers\klin.dat [2011-01-29 18:05:44 \| 000,097,859 \| ---- \| M] () -- C:\Windows\System32\drivers\klick.dat [2011-01-29 18:03:19 \| 000,488,536 \| ---- \| M] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys [2011-01-28 21:05:54 \| 000,000,913 \| ---- \| M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011-01-28 19:41:33 \| 000,063,824 \| ---- \| M] () -- C:\Users\tomek\Desktop\APARAT.jpg [2011-01-28 19:41:00 \| 000,675,488 \| ---- \| M] () -- C:\Windows\System32\perfh015.dat [2011-01-28 19:41:00 \| 000,598,900 \| ---- \| M] () -- C:\Windows\System32\perfh009.dat [2011-01-28 19:41:00 \| 000,131,772 \| ---- \| M] () -- C:\Windows\System32\perfc015.dat [2011-01-28 19:41:00 \| 000,104,914 \| ---- \| M] () -- C:\Windows\System32\perfc009.dat [2011-01-28 15:26:37 \| 000,065,024 \| ---- \| M] () -- C:\Users\tomek\Desktop\kody okolic Białegostoku.xls [2011-01-28 08:00:29 \| 000,016,692 \| ---- \| M] () -- C:\Users\tomek\Desktop\Moja PRaca Licencjacka.docx [2011-01-27 20:32:08 \| 000,068,608 \| ---- \| M] () -- C:\Users\tomek\Desktop\Akwaria cennik-10.doc [2011-01-27 15:05:25 \| 000,047,722 \| ---- \| M] () -- C:\Users\tomek\Desktop\Demot.jpg [2011-01-27 14:09:58 \| 000,008,592 \| ---- \| M] () -- C:\Users\tomek\AppData\Local\d3d9caps.dat [2011-01-24 12:06:28 \| 000,069,819 \| ---- \| M] () -- C:\Users\tomek\Documents\Bez nazwy 1 kopia.jpg [2011-01-24 01:59:27 \| 000,294,912 \| ---- \| M] () -- C:\Users\tomek\Desktop\ROZWÓJ PRZESTRZENNY GMINY MIEJSCIEJ.doc [2011-01-23 20:04:43 \| 002,359,350 \| ---- \| M] () -- C:\Users\tomek\Desktop\de_rats4_final0003.bmp [2011-01-22 17:45:46 \| 000,054,902 \| ---- \| M] () -- C:\Users\tomek\Desktop\Konflikt przestrzenny.docx [2011-01-21 12:09:08 \| 000,029,696 \| ---- \| M] () -- C:\Users\tomek\Desktop\cele, powody, badania2.doc [2011-01-21 12:09:08 \| 000,000,162 \| -H-- \| M] () -- C:\Users\tomek\Desktop\~$le, powody, badania2.doc [2011-01-21 12:08:53 \| 000,000,162 \| -H-- \| M] () -- C:\Users\tomek\Desktop\~$le, powody, badania.docx [2011-01-21 03:55:13 \| 000,014,732 \| ---- \| M] () -- C:\Users\tomek\Desktop\cele, powody, badania.docx [2011-01-20 17:17:42 \| 000,013,096 \| ---- \| M] () -- C:\Users\tomek\Desktop\tempdecal.wad [2011-01-20 17:04:43 \| 000,014,324 \| ---- \| M] () -- C:\Users\tomek\Desktop\RASTA.jpg [2011-01-20 03:02:54 \| 000,068,608 \| ---- \| M] () -- C:\Users\tomek\Documents\Konflikt przestrzenny.doc [2011-01-18 00:06:41 \| 000,015,047 \| ---- \| M] () -- C:\Users\tomek\Desktop\bankowość tir dzienni.docx [2011-01-14 03:04:23 \| 000,000,127 \| ---- \| M] () -- C:\Windows\System32\MRT.INI [2011-01-08 21:05:42 \| 000,043,520 \| ---- \| M] () -- C:\Users\tomek\Desktop\HOTELARSTWO W ZABYTKACH.doc [2011-01-07 18:15:12 \| 000,002,828 \| -HS- \| M] () -- C:\ProgramData\KGyGaAvL.sys [2011-01-07 17:52:54 \| 000,000,088 \| RHS- \| M] () -- C:\ProgramData\E43B7E1C69.sys [2011-01-05 12:02:19 \| 000,010,847 \| ---- \| M] () -- C:\Users\tomek\Desktop\Nadające się SPS.docx [2011-01-01 00:35:23 \| 000,001,096 \| ---- \| M] () -- C:\Users\tomek\Desktop\Żulionerzy NG.lnk [2 C:\Users\tomek\Desktop\.tmp files C:\Users\tomek\Desktop\.tmp ] ========== Files Created - No Company Name ========== [2011-01-29 22:42:52 \| 000,069,938 \| ---- \| C] () -- C:\Users\tomek\Desktop\gmer.jpg [2011-01-29 21:40:28 \| 000,040,360 \| ---- \| C] () -- C:\Users\tomek\Desktop\Usbfix.jpg [2011-01-29 21:36:49 \| 799,958,232 \| ---- \| C] () -- C:\UsbFix_Upload_Me_TOMEK-PC.zip [2011-01-29 18:54:21 \| 000,032,931 \| ---- \| C] () -- C:\Users\tomek\Desktop\autorun.jpg [2011-01-29 18:05:44 \| 000,114,243 \| ---- \| C] () -- C:\Windows\System32\drivers\klin.dat [2011-01-29 18:05:44 \| 000,097,859 \| ---- \| C] () -- C:\Windows\System32\drivers\klick.dat [2011-01-28 21:05:54 \| 000,000,913 \| ---- \| C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011-01-28 19:41:32 \| 000,063,824 \| ---- \| C] () -- C:\Users\tomek\Desktop\APARAT.jpg [2011-01-28 15:26:35 \| 000,065,024 \| ---- \| C] () -- C:\Users\tomek\Desktop\kody okolic Białegostoku.xls [2011-01-28 08:00:27 \| 000,016,692 \| ---- \| C] () -- C:\Users\tomek\Desktop\Moja PRaca Licencjacka.docx [2011-01-27 20:32:05 \| 000,068,608 \| ---- \| C] () -- C:\Users\tomek\Desktop\Akwaria cennik-10.doc [2011-01-27 15:05:25 \| 000,047,722 \| ---- \| C] () -- C:\Users\tomek\Desktop\Demot.jpg [2011-01-24 12:06:24 \| 000,069,819 \| ---- \| C] () -- C:\Users\tomek\Documents\Bez nazwy 1 kopia.jpg [2011-01-23 20:04:42 \| 002,359,350 \| ---- \| C] () -- C:\Users\tomek\Desktop\de_rats4_final0003.bmp [2011-01-21 12:09:08 \| 000,000,162 \| -H-- \| C] () -- C:\Users\tomek\Desktop\~$le, powody, badania2.doc [2011-01-21 12:09:06 \| 000,029,696 \| ---- \| C] () -- C:\Users\tomek\Desktop\cele, powody, badania2.doc [2011-01-21 12:08:53 \| 000,000,162 \| -H-- \| C] () -- C:\Users\tomek\Desktop\~$le, powody, badania.docx [2011-01-21 03:55:12 \| 000,014,732 \| ---- \| C] () -- C:\Users\tomek\Desktop\cele, powody, badania.docx [2011-01-20 22:24:30 \| 000,054,902 \| ---- \| C] () -- C:\Users\tomek\Desktop\Konflikt przestrzenny.docx [2011-01-20 17:17:37 \| 000,013,096 \| ---- \| C] () -- C:\Users\tomek\Desktop\tempdecal.wad [2011-01-20 17:04:40 \| 000,014,324 \| ---- \| C] () -- C:\Users\tomek\Desktop\RASTA.jpg [2011-01-20 03:02:53 \| 000,068,608 \| ---- \| C] () -- C:\Users\tomek\Documents\Konflikt przestrzenny.doc [2011-01-18 05:29:13 \| 000,294,912 \| ---- \| C] () -- C:\Users\tomek\Desktop\ROZWÓJ PRZESTRZENNY GMINY MIEJSCIEJ.doc [2011-01-18 00:06:40 \| 000,015,047 \| ---- \| C] () -- C:\Users\tomek\Desktop\bankowość tir dzienni.docx [2011-01-08 21:05:41 \| 000,043,520 \| ---- \| C] () -- C:\Users\tomek\Desktop\HOTELARSTWO W ZABYTKACH.doc [2011-01-05 12:02:17 \| 000,010,847 \| ---- \| C] () -- C:\Users\tomek\Desktop\Nadające się SPS.docx [2011-01-01 00:35:23 \| 000,001,096 \| ---- \| C] () -- C:\Users\tomek\Desktop\Żulionerzy NG.lnk [2010-10-28 07:28:08 \| 000,005,046 \| ---- \| C] () -- C:\Windows\wininit.ini [2010-10-14 01:36:44 \| 000,179,263 \| ---- \| C] () -- C:\Windows\System32\xlive.dll.cat [2010-09-13 18:38:49 \| 000,002,828 \| -HS- \| C] () -- C:\ProgramData\KGyGaAvL.sys [2010-09-13 18:38:49 \| 000,000,088 \| RHS- \| C] () -- C:\ProgramData\E43B7E1C69.sys [2010-03-24 12:52:32 \| 000,223,663 \| ---- \| C] () -- C:\ProgramData\nvModes.dat [2010-03-24 12:52:32 \| 000,223,663 \| ---- \| C] () -- C:\ProgramData\nvModes.001 [2010-03-07 21:21:14 \| 000,691,696 \| ---- \| C] () -- C:\Windows\System32\drivers\sptd.sys [2010-02-11 03:03:37 \| 000,000,127 \| ---- \| C] () -- C:\Windows\System32\MRT.INI [2009-10-20 04:36:21 \| 000,117,248 \| ---- \| C] () -- C:\Windows\System32\EhStorAuthn.dll [2009-10-12 19:14:39 \| 000,110,592 \| ---- \| C] () -- C:\Windows\System32\FsUsbExDevice.Dll [2009-10-12 19:14:39 \| 000,036,608 \| ---- \| C] () -- C:\Windows\System32\FsUsbExDisk.Sys [2009-08-01 17:57:33 \| 000,000,025 \| ---- \| C] () -- C:\Windows\cdplayer.ini [2009-02-04 21:29:29 \| 000,000,056 \| -H-- \| C] () -- C:\ProgramData\ezsidmv.dat [2009-01-25 19:08:00 \| 000,003,516 \| ---- \| C] () -- C:\Program Files\REGISTER.RTF [2009-01-25 19:08:00 \| 000,001,568 \| ---- \| C] () -- C:\Program Files\WCMICONS.INC [2008-12-31 12:16:48 \| 000,008,592 \| ---- \| C] () -- C:\Users\tomek\AppData\Local\d3d9caps.dat [2008-12-19 23:32:19 \| 000,165,376 \| ---- \| C] () -- C:\Windows\System32\unrar.dll [2008-12-19 23:32:18 \| 000,000,038 \| ---- \| C] () -- C:\Windows\avisplitter.ini [2008-12-19 23:32:16 \| 000,881,664 \| ---- \| C] () -- C:\Windows\System32\xvidcore.dll [2008-12-19 23:32:16 \| 000,159,839 \| ---- \| C] () -- C:\Windows\System32\xvidvfw.dll [2008-12-19 23:32:15 \| 003,596,288 \| ---- \| C] () -- C:\Windows\System32\qt-dx331.dll [2008-12-19 23:32:13 \| 000,007,680 \| ---- \| C] () -- C:\Windows\System32\ff_vfw.dll [2008-11-30 13:51:49 \| 000,112,688 \| ---- \| C] () -- C:\Windows\System32\shw32.dll [2008-11-27 16:30:45 \| 000,138,464 \| ---- \| C] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2008-11-27 16:30:44 \| 000,022,328 \| ---- \| C] () -- C:\Users\tomek\AppData\Roaming\PnkBstrK.sys [2008-10-18 21:03:40 \| 000,098,397 \| ---- \| C] () -- C:\Users\tomek\AppData\Roaming\nvModes.001 [2008-10-18 19:42:49 \| 000,098,397 \| ---- \| C] () -- C:\Users\tomek\AppData\Roaming\nvModes.dat [2008-10-13 03:43:17 \| 001,769,984 \| ---- \| C] () -- C:\Windows\System32\drivers\snp2uvc.sys [2008-10-13 03:43:17 \| 000,028,160 \| ---- \| C] () -- C:\Windows\System32\drivers\sncduvc.sys [2008-10-12 22:05:09 \| 000,049,664 \| ---- \| C] () -- C:\Users\tomek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008-10-12 21:51:54 \| 000,106,496 \| R--- \| C] () -- C:\Windows\System32\vshp1018.dll [2008-10-07 09:13:30 \| 000,197,912 \| ---- \| C] () -- C:\Windows\System32\physxcudart_20.dll [2008-10-07 09:13:22 \| 000,058,648 \| ---- \| C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll [2008-10-07 09:13:20 \| 000,058,648 \| ---- \| C] () -- C:\Windows\System32\AgCPanelSwedish.dll [2008-10-07 09:13:20 \| 000,058,648 \| ---- \| C] () -- C:\Windows\System32\AgCPanelSpanish.dll [2008-10-07 09:13:20 \| 000,058,648 \| ---- \| C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll [2008-10-07 09:13:20 \| 000,058,648 \| ---- \| C] () -- C:\Windows\System32\AgCPanelPortugese.dll [2008-10-07 09:13:20 \| 000,058,648 \| ---- \| C] () -- C:\Windows\System32\AgCPanelKorean.dll [2008-10-07 09:13:20 \| 000,058,648 \| ---- \| C] () -- C:\Windows\System32\AgCPanelJapanese.dll [2008-10-07 09:13:20 \| 000,058,648 \| ---- \| C] () -- C:\Windows\System32\AgCPanelGerman.dll [2008-10-07 09:13:20 \| 000,058,648 \| ---- \| C] () -- C:\Windows\System32\AgCPanelFrench.dll [2008-04-18 00:45:31 \| 000,000,010 \| ---- \| C] () -- C:\Windows\System32\ABLKSR.ini [2007-10-25 16:26:10 \| 000,005,632 \| ---- \| C] () -- C:\Windows\System32\drivers\StarOpen.sys [2006-11-02 13:35:32 \| 000,005,632 \| ---- \| C] () -- C:\Windows\System32\sysprepMCE.dll [2006-11-02 08:40:29 \| 000,013,750 \| ---- \| C] () -- C:\Windows\System32\pacerprf.ini [1996-04-03 20:33:26 \| 000,005,248 \| ---- \| C] () -- C:\Windows\System32\giveio.sys < End of report > niestety GMER mi nie dziala niebieski ekran mozesz mi powiedziec czy jeszcze cos siedzi?:)

@Blade@

Pomógł: 8 razy

Wysłany: 2011-01-30, 08:34

Miałaś podać raport z UsbFix. Użyłaś go, ale raportu brak. Uzupełnij.
_________________

apstrakcja

Wysłany: 2011-01-30, 22:23

o choroba zapomnialem przepraszam ############################## \| UsbFix 7.038 \| [Deletion] User: tomek (Administrator) # TOMEK-PC [ASUSTeK Computer Inc. F3Sg] Updated 14/01/2011 by El Desaparecido / C_XX Started at 21:33:32 \| 29/01/2011 Website: http://www.teamxscript.org Contact: eldesaparecido@teamxscript.org CPU: Intel(R) Core(TM)2 Duo CPU T5750 @ 2.00GHz CPU 2: Intel(R) Core(TM)2 Duo CPU T5750 @ 2.00GHz MicrosoftŽ Windows Vista Home Premium (6.0.6002 32-Bit) # Service Pack 2 Internet Explorer 7.0.6002.18005 Windows Firewall: Enabled RAM 3070 Mb C:\ (%systemdrive%) Fixed drive # 207 Gb (17 Mb free - 8%) [VistaOS] # NTFS D:\ CD-ROM E:\ Fixed drive # 82 Gb (81 Mb free - 100%) [Nowy] # NTFS F:\ Removable drive # 4 Gb (4 Mb free - 93%) [] # FAT32 ################## \| Files # Infected Folders \| Deleted ! F:\New Folder.lnk Deleted ! F:\Passwords.lnk Deleted ! F:\Documents.lnk Deleted ! F:\Pictures.lnk Deleted ! F:\Music.lnk Deleted ! F:\Video.lnk Deleted ! F:\DCIM.lnk Deleted ! F:\100DCIM.lnk Deleted ! C:\$RECYCLE.BIN\S-1-5-21-2965980618-446286328-146748505-1000 Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2965980618-446286328-146748505-1000 Deleted ! F:\autorun.inf ################## \| Registry \| ################## \| Mountpoints2 \| Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{3cdbe5b1-c6bf-11dd-95b6-001fc6e73e6e} Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{3ebe7f4e-45cf-11de-8b03-001fc6e73e6e} Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{6c4a73c4-4556-11de-bb39-806e6f6e6963} Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{940e77dd-9a9a-11dd-92b0-001fc6e73e6e} Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{f3121e8b-4d0a-11de-88ab-001fc6e73e6e} ################## \| Listing \| [29/01/2011 - 21:35:48 \| SHD ] C:\$Recycle.Bin [21/07/2009 - 15:37:50 \| D ] C:\adama [18/09/2006 - 22:43:36 \| N \| 24] C:\autoexec.bat [29/01/2011 - 21:28:14 \| RASHD ] C:\Autorun.inf [17/01/2010 - 09:09:57 \| D ] C:\Boot [11/04/2009 - 07:36:36 \| RASH \| 333257] C:\bootmgr [18/04/2008 - 01:02:24 \| N \| 8192] C:\BOOTSECT.BAK [30/12/2006 - 00:22:40 \| N \| 7] C:\CF21.txt [28/10/2010 - 00:40:19 \| D ] C:\ComboFix [18/09/2006 - 22:43:37 \| N \| 10] C:\config.sys [24/07/2009 - 16:59:16 \| D ] C:\CorelDRAW9 [02/11/2006 - 14:02:03 \| SHD ] C:\Documents and Settings [22/02/2010 - 17:36:55 \| D ] C:\Downloads [12/02/2008 - 03:03:34 \| N \| 1048576] C:\F3Sg.BIN [17/04/2008 - 10:30:27 \| N \| 16] C:\F3Sg_VISTA.20 [25/01/2009 - 19:10:33 \| D ] C:\forum [13/10/2008 - 03:03:38 \| D ] C:\Intel [19/11/2009 - 01:58:32 \| N \| 0] C:\IO.SYS [28/01/2011 - 23:05:23 \| D ] C:\KAV [19/11/2009 - 01:58:32 \| N \| 0] C:\MSDOS.SYS [12/10/2008 - 22:01:14 \| RHD ] C:\MSOCache [24/03/2010 - 12:50:33 \| D ] C:\NVIDIA [29/01/2011 - 20:30:39 \| ASH \| 3534008320] C:\pagefile.sys [21/01/2008 - 03:32:31 \| D ] C:\PerfLogs [29/01/2011 - 21:17:54 \| D ] C:\Program Files [29/01/2011 - 18:03:51 \| HD ] C:\ProgramData [28/10/2010 - 00:39:14 \| D ] C:\Qoobox [11/12/2007 - 04:31:41 \| N \| 14] C:\RECOVERY.DAT [13/10/2008 - 03:13:36 \| N \| 426] C:\RHDSetup.log [15/11/2009 - 17:29:13 \| N \| 159] C:\Setup.log [15/09/2010 - 18:34:42 \| N \| 3932184] C:\snp2uvc-001.raw [29/01/2011 - 18:46:53 \| SHD ] C:\System Volume Information [29/01/2011 - 21:35:48 \| D ] C:\UsbFix [29/01/2011 - 21:33:32 \| A \| 3311] C:\UsbFix.txt [29/01/2011 - 21:31:54 \| N \| 799953949] C:\UsbFix_Upload_Me_TOMEK-PC.zip [15/03/2009 - 17:15:29 \| D ] C:\Users [29/01/2011 - 20:30:38 \| D ] C:\Windows [29/01/2011 - 21:35:48 \| SHD ] E:\$RECYCLE.BIN [18/07/2010 - 18:15:13 \| D ] E:\8e22d4d1b8492dab8c9c5d4955730a [29/01/2011 - 21:28:14 \| RASHD ] E:\Autorun.inf [15/10/2010 - 09:19:49 \| N \| 0] E:\NPSC.log [04/10/2010 - 19:12:06 \| N \| 128] E:\npssamsungmodeldb.ldb [04/11/2010 - 14:48:31 \| N \| 276480] E:\skecz 4.MSWMM [04/11/2010 - 14:48:01 \| N \| 276480] E:\Skecz.MSWMM [15/08/2010 - 14:18:12 \| N \| 42475] E:\SMS do krola.mp3 [24/06/2010 - 17:43:12 \| SHD ] E:\System Volume Information [15/08/2010 - 14:22:45 \| N \| 422008] E:\TekstzJOB-a.wav [28/01/2011 - 21:13:10 \| N \| 0] F:\SONYCF.IND [28/01/2011 - 21:13:58 \| D ] F:\DCIM [28/01/2011 - 20:01:38 \| D ] F:\100DCIM ################## \| Vaccin \| C:\Autorun.inf Folder created by UsbFix (El Desaparecido & C_XX) E:\Autorun.inf Folder created by UsbFix (El Desaparecido & C_XX) F:\Autorun.inf Folder created by UsbFix (El Desaparecido & C_XX) ################## \| Upload \| Please send the file: C:\UsbFix_Upload_Me_TOMEK-PC.zip http://www.teamxscript.org/Upload.php Thank you for your contribution.

@Blade@

Pomógł: 8 razy

Wysłany: 2011-01-31, 09:08

Ok, w takim razie czysto.

W UsbFix kliknij Uninstall

W OTL kliknij Sprzątanie

Przeczyść dysk oraz rejestr CCleaner

Wykonaj pełne skanowanie Malwarebytes' Anti-Malware - jeśli coś znajdzie usuń i daj raport

Odinstaluj starą wersję Javy:

Cytat:

Java(TM) 6 Update 10

i zainstaluj najnowszą

http://www.instalki.pl/pr...28JRE%29_6.html

Odinstaluj starą wersję czytnika .pdf:

Cytat:

Adobe Reader 7.0.5 - Polish

i zainstaluj najnowszą

http://www.instalki.pl/pr...obe_Reader.html

_________________

Dodaj do:

Forum komputerowe PC Town Strona Główna » Kompiradło » Bezpieczeństwo w sieci » OTL - log

Możesz pisać nowe tematy
Możesz odpowiadać w tematach
Nie możesz zmieniać swoich postów
Nie możesz usuwać swoich postów
Nie możesz głosować w ankietach
Nie możesz załączać plików na tym forum
Możesz ściągać załączniki na tym forum

Dodaj temat do Ulubionych
Wersja do druku

system walidacji dla gości opracował Petermechanic Forum komputerowe

Strona wygenerowana w 0,41 sekundy. Zapytań do SQL: 9