Błąd podczas odtwarzania filmików

Oprogramowanie komputerowe Problemy z oprogramowaniem
#1

Witam. Mam taki problem juz od dłuższego czasu…kiedy chce właczyc np jakis teledysk na onecie lub wiadomości wyskakuje taki błąd iexplorer.exe i strona się wyłącza.Prosze o pomoc.Z góry dzieki.

http://img178.imageshack.us/my.php?image=sdsdsddc8.png

#2

Może być to wina syfu. Komputer nie zainfekowany jakimiś pasożytami. Daj Zestaw Logów Z Hijackthis oraz

Combofix, zamknij porty za pomocą WWDC i zmień przeglądarkę np na FF.

#3 
Deckard's System Scanner v20071014.68

Run by Nowak on 2008-02-29 08:32:04

Computer is in Normal Mode.

--------------------------------------------------------------------------------


-- System Restore --------------------------------------------------------------


Successfully created a Deckard's System Scanner Restore Point.



-- Last 5 Restore Point(s) --

71: 2008-02-29 07:32:07 UTC - RP316 - Deckard's System Scanner Restore Point

70: 2008-02-29 07:27:28 UTC - RP315 - ComboFix created restore point

69: 2008-02-27 22:20:39 UTC - RP314 - Punkt kontrolny systemu

68: 2008-02-26 17:14:23 UTC - RP313 - Punkt kontrolny systemu

67: 2008-02-25 16:14:09 UTC - RP312 - Installed Windows Media Format 9 Series Runtime Setup



-- First Restore Point -- 

1: 2008-01-17 22:21:56 UTC - RP246 - Usunięto: Microsoft Office Word MUI (Polish) 2007



Backed up registry hives.

Performed disk cleanup.


[color=red]System Drive C: has 7.35 GiB (less than 15%) free.[/color]



-- HijackThis (run as Nowak.exe) -----------------------------------------------


Logfile of HijackThis v1.99.1

Scan saved at 08:32:33, on 2008-02-29

Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.5730.0013)


Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\Program Files\CyberLink\Shared files\RichVideo.exe

C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\winsys2.exe

C:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program Files\MSI\Live Update 3\LMonitor.exe

C:\Program Files\DAEMON Tools Pro\DTProAgent.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\AutoConnect\AutoConnect.exe

C:\Documents and Settings\Nowak\Pulpit\dss.exe

C:\DOCUME~1\Nowak\Pulpit\HIJACK~1\Nowak.exe


R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza

R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: Catcher Class - {ADECBED6-0366-4377-A739-E69DFBA04663} - C:\Program Files\Moyea\FLV Downloader\MoyeaCth.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe

O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe

O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe

O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe" "ZTE Corporation\ZXDSL852"

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [LiveMonitor] C:\Program Files\MSI\Live Update 3\LMonitor.exe

O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"

O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe

O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O11 - Options group: [INTERNATIONAL] International*

O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{3D1CE770-001E-4BF4-B42A-56B598571246}: NameServer = 194.204.159.1 217.98.63.164

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\

O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: NBService - Unknown owner - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe (file missing)

O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe



-- File Associations -----------------------------------------------------------


[COLOR=red].cpl - cplfile - shell\cplopen\command - rundll32.exe shell32.dll,Control_RunDLL "%1",%*[/COLOR]

[COLOR=red].cpl - cplfile - shell\runas\command - rundll32.exe shell32.dll,Control_RunDLLAsUser "%1",%*[/COLOR]



-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------


R0 prohlp02 (StarForce Protection Helper Driver v2) - c:\windows\system32\drivers\prohlp02.sys 

R0 prosync1 (StarForce Protection Synchronization Driver v1) - c:\windows\system32\drivers\prosync1.sys 

R0 sfhlp01 (StarForce Protection Helper Driver) - c:\windows\system32\drivers\sfhlp01.sys 

R1 ISODrive (ISO DVD/CD-ROM Device Driver) - c:\program files\ultraiso\drivers\isodrive.sys 

R1 prodrv06 (StarForce Protection Environment Driver v6) - c:\windows\system32\drivers\prodrv06.sys 


S3 Epiusb (USB Flash) - c:\windows\system32\drivers\epiusb.sys 

S3 GMSIPCI - e:\install\gmsipci.sys (file missing)

S3 MSICPL - e:\install4\msicpl.sys (file missing)

S3 NTACCESS - e:\ntaccess.sys (file missing)

S3 SER120 (OTI Serial port driver) - c:\windows\system32\drivers\ser120.sys 

S3 slabbus (USB Data Cable driver (WDM)) - c:\windows\system32\drivers\slabbus.sys (file missing)

S3 slabser (USB Data Cable Drivers) - c:\windows\system32\drivers\slabser.sys (file missing)



-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------


R2 StarWindServiceAE (StarWind AE Service) - c:\program files\alcohol soft\alcohol 120\starwind\starwindserviceae.exe 


S3 AresChatServer (Ares Chatroom server) - c:\program files\ares\chatserver.exe 

S3 NBService - c:\program files\nero\nero 7\nero backitup\nbservice.exe (file missing)

S3 NMIndexingService - "c:\program files\common files\ahead\lib\nmindexingservice.exe" (file missing)



-- Device Manager: Disabled ----------------------------------------------------


Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}

Description: NVIDIA nForce Networking Controller

Device ID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\NVNET_DEV0373\4&1CC73C01&0&00

Manufacturer: NVIDIA

Name: NVIDIA nForce Networking Controller #3

PNP Device ID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\NVNET_DEV0373\4&1CC73C01&0&00

Service: NVENETFD


Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}

Description: NVIDIA nForce Networking Controller

Device ID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\NVNET_DEV0373\4&11D074D0&0&00

Manufacturer: NVIDIA

Name: NVIDIA nForce Networking Controller #4

PNP Device ID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\NVNET_DEV0373\4&11D074D0&0&00

Service: NVENETFD



-- Scheduled Tasks -------------------------------------------------------------


2008-01-18 17:15:00 390 --a------ C:\WINDOWS\Tasks\1-Click Maintenance.job



-- Files created between 2008-01-29 and 2008-02-29 -----------------------------


2008-02-26 16:26:09 0 dr-h----- C:\Documents and Settings\Nowak\Recent

2008-02-25 17:13:58 0 d-------- C:\Program Files\Empire Interactive

2008-02-24 21:16:05 0 d-------- C:\Program Files\SopCast

2008-02-14 19:45:03 0 d--h----- C:\Program Files\Zero G Registry

2008-02-14 19:45:03 0 d-------- C:\Program Files\Sports Interactive

2008-02-14 19:44:37 0 d--h----- C:\Documents and Settings\Nowak\InstallAnywhere

2008-02-12 18:42:07 8704 --a------ C:\WINDOWS\system32\vidccleaner.exe 

2008-02-12 18:41:30 217088 --a------ C:\WINDOWS\system32\skjpeg40.dll 

2008-02-12 18:41:29 83968 --a------ C:\WINDOWS\system32\Skbase40.dll 

2008-02-12 18:41:27 0 d-------- C:\Program Files\Samsung

2008-02-10 12:20:34 0 d-------- C:\Program Files\MSI

2008-02-09 14:06:44 3532 --a------ C:\drmHeader.bin

2008-02-08 09:54:36 0 d-------- C:\WINDOWS\sstates

2008-02-08 09:54:36 0 d-------- C:\WINDOWS\snap

2008-02-08 09:54:36 0 d-------- C:\WINDOWS\skins

2008-02-08 09:54:36 0 d-------- C:\WINDOWS\record

2008-02-08 09:54:36 0 d-------- C:\WINDOWS\patches

2008-02-08 09:54:36 0 d-------- C:\WINDOWS\docs

2008-02-08 09:54:36 0 d-------- C:\WINDOWS\cheats

2008-02-04 16:27:30 0 d-------- C:\Program Files\Bethesda Softworks

2008-02-02 14:04:44 0 d-------- C:\Program Files\Codemasters

2008-02-01 21:12:18 0 d-------- C:\Program Files\AutoConnect

2008-01-31 20:10:06 0 d-------- C:\Program Files\IrfanView

2008-01-30 16:42:31 0 d-------- C:\WINDOWS\system32\LogFiles

2008-01-30 16:28:01 0 d-------- C:\Program Files\Electronic Arts



-- Find3M Report ---------------------------------------------------------------


2008-02-29 08:28:40 53 --a------ C:\biosinfo

2008-02-28 22:01:05 0 d-------- C:\Documents and Settings\Nowak\Dane aplikacji\uTorrent

2008-02-25 17:17:29 0 d--h----- C:\Program Files\InstallShield Installation Information

2008-02-19 10:40:49 0 d-------- C:\Documents and Settings\Nowak\Dane aplikacji\Google

2008-02-19 10:40:34 0 d-------- C:\Program Files\Google

2008-02-19 10:04:48 0 d-------- C:\Program Files\Ares

2008-02-14 19:53:06 0 d-------- C:\Documents and Settings\Nowak\Dane aplikacji\Sports Interactive

2008-02-10 12:12:03 0 d-------- C:\Program Files\Setup Files

2008-02-08 09:55:03 0 d-------- C:\Documents and Settings\Nowak\Dane aplikacji\fltk.org

2008-02-04 16:27:23 0 d-------- C:\Program Files\Common Files\InstallShield

2008-01-18 21:08:18 0 d-------- C:\Program Files\KaraFun

2008-01-18 12:06:45 0 d-------- C:\Program Files\Onet

2008-01-18 11:51:33 0 d-------- C:\Program Files\Common Files

2008-01-18 11:49:37 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard

2008-01-17 23:20:44 0 d-------- C:\Documents and Settings\Nowak\Dane aplikacji\Macromedia

2008-01-12 16:04:07 0 d-------- C:\Program Files\Nero

2008-01-12 16:03:20 0 d-------- C:\Documents and Settings\Nowak\Dane aplikacji\Nero

2008-01-12 16:02:49 0 d-------- C:\Program Files\Common Files\Nero

2008-01-12 16:00:46 0 d-------- C:\Program Files\Common Files\Ahead

2008-01-11 17:28:15 0 d-------- C:\Program Files\UltraISO

2008-01-11 17:28:15 0 d-------- C:\Program Files\Common Files\EZB Systems

2008-01-09 21:09:21 461370 --a------ C:\WINDOWS\system32\perfh015.dat

2008-01-09 21:09:21 80664 --a------ C:\WINDOWS\system32\perfc015.dat

2008-01-08 17:15:05 0 d-------- C:\Program Files\NAPI-PROJEKT

2008-01-05 11:42:28 0 d-------- C:\Documents and Settings\Nowak\Dane aplikacji\Watchtower

2008-01-05 11:40:40 0 d-------- C:\Program Files\Watchtower

2008-01-02 20:21:28 0 d-------- C:\Program Files\Disc2Phone

2007-12-30 21:08:51 0 d-------- C:\Program Files\Wiedźmin



-- Registry Dump ---------------------------------------------------------------


*Note* empty entries & legit default entries are not shown



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-10-04 17:14]

"SW20"="C:\WINDOWS\system32\sw20.exe" [2006-12-15 03:58]

"SW24"="C:\WINDOWS\system32\sw24.exe" [2006-12-15 03:58]

"WinSys2"="C:\WINDOWS\system32\winsys2.exe" [2006-12-15 03:59]

"CnxDslTaskBar"="C:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe" [2005-07-21 21:52]

"RTHDCPL"="RTHDCPL.EXE" [2006-09-06 04:44 C:\WINDOWS\RTHDCPL.exe]

"SkyTel"="SkyTel.EXE" [2006-05-16 11:04 C:\WINDOWS\SkyTel.exe]

"Alcmtr"="ALCMTR.EXE" [2005-05-03 11:43 C:\WINDOWS\Alcmtr.exe]

"nwiz"="nwiz.exe" [2007-10-04 17:14 C:\WINDOWS\system32\nwiz.exe]

"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-10-04 17:14]

"LiveMonitor"="C:\Program Files\MSI\Live Update 3\LMonitor.exe" [2007-01-17 17:01]

"UnlockerAssistant"="C:\Program Files\Unlocker\UnlockerAssistant.exe" []


[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"DAEMON Tools Pro Agent"="C:\Program Files\DAEMON Tools Pro\DTProAgent.exe" [2007-09-06 14:08]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 23:44]

"AutoConnect"="C:\Program Files\AutoConnect\AutoConnect.exe" [2006-12-03 00:14]


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Microsoft Office.lnk]

backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]

ALCMTR.EXE


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]

"C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]

"C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Pro Agent]

"C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]

"C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]

nwiz.exe /install


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Onet.pl AutoUpdate]

C:\Program Files\Common Files\Onet.pl\AutoUpdate.exe /tsr


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]

"C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]

RTHDCPL.EXE


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]

SkyTel.EXE



[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{87de137b-5639-11dc-9327-806d6172696f}]

AutoRun\command- F:\Autorun.exe


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8a6df817-b38a-11dc-a29a-806d6172696f}]

AutoRun\command- F:\Autorun.exe


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d2f0c6a1-562f-11dc-8e70-806d6172696f}]

AutoRun\command- F:\Autorun.exe





-- End of Deckard's System Scanner: finished at 2008-02-29 08:32:50 ------------

Logfile of HijackThis v1.99.1

Scan saved at 08:32:33, on 2008-02-29

Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.5730.0013)


Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\Program Files\CyberLink\Shared files\RichVideo.exe

C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\winsys2.exe

C:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program Files\MSI\Live Update 3\LMonitor.exe

C:\Program Files\DAEMON Tools Pro\DTProAgent.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\AutoConnect\AutoConnect.exe

C:\Documents and Settings\Nowak\Pulpit\dss.exe

C:\DOCUME~1\Nowak\Pulpit\HIJACK~1\Nowak.exe


R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza

R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: Catcher Class - {ADECBED6-0366-4377-A739-E69DFBA04663} - C:\Program Files\Moyea\FLV Downloader\MoyeaCth.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe

O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe

O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe

O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe" "ZTE Corporation\ZXDSL852"

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [LiveMonitor] C:\Program Files\MSI\Live Update 3\LMonitor.exe

O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"

O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe

O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O11 - Options group: [INTERNATIONAL] International*

O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{3D1CE770-001E-4BF4-B42A-56B598571246}: NameServer = 194.204.159.1 217.98.63.164

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\

O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: NBService - Unknown owner - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe (file missing)

O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe