Niewidoczny pasek startu; kopiuj, wklej nie działa

monirra89 · 19 Wrzesień 2011 11:05

Witam,

Mam problem z krórym nie potrafię się uporać - po pierwsze niewidoczny jest pasek windows i nie jest on schowany ani zminimalizowany po prostu go nie ma…; po drugie nie działa opcja “przeciągnij - upuść” jak i kopiuj - wklej wytnij-wklej. Nie działa również większość programów np explorer. Jest problem z zainstalowaniem jakiegokolwiek programu w tym skanera antywirusowego… Podsumowanie: jestem załamana :] chciałam postawić system od nowa jednak nie mam jak przenieść wszystkich danych na dysk/pendrive ponieważ nie działa opcja kopiuj wklej… wyślij do też nie działa. Macie jakiś pomysł co mogę z tym zrobić? Jest jakiś inny sposów przenoszenia danych? Grzebać w samej stacji nie będę bo się boję a dużego serwera ftp również nie posiadam. Pomocy proszę ! ![-o<

spandaupol · 19 Wrzesień 2011 12:17

Co do paska zadań możesz użyć Taskbar Repair Tool http://www.searchengines.pl/Narzedzia-d … 39226.html Jeśli to jednak infekcja może to nic nie dać

Jesteś w stanie pobrać i wykonać skan OTL.scr lub OTL.com Jeśli tak pobierz stąd [http://www.fixitpc.pl/topic/61-diagnost … 4#entry324](http://www.fixitpc.pl/topic/61-diagnostyka-ogolne-raporty-systemowe/page p 324#entry324) wykonaj skan i pokaż raporty na forum

Wincenty_Pstrowski · 19 Wrzesień 2011 12:23

Jeżeli chcesz tylko przenieść jakieś dane na pendrive, to możesz w tym celu skorzystać na przykład z linuksowego LiveCD, możesz go ściągnąć na przykład stąd: http://czytelnia.ubuntu.pl/index.php/2010/05/13/lsniacy-lamparcik-10-04pl-czyli-nasz-remiks-ubuntu-10-04-wydany/. Po wystartowaniu kompa z CD wybierzesz “Wypróbuj system bez instalacji”, po chwili będziesz miała do dyspozycji w pełni funkcjonujący system, bezpiecznie przeniesiesz potrzebne dane. Przydało by się potem przeskanować te dane pod kątem szkodliwego oprogramowania bo jeśli masz jakieś wirusy na kompie to najpewniej skopiują się na ten pendrive. Oczywiście do nagrania płyty startowej z Linuksem może Ci być potrzebny inny sprawny komputer podłączony do sieci.

monirra89 · 19 Wrzesień 2011 13:04

OTL logfile created on: 2011-09-19 15:32:01 - Run 1

OTL by OldTimer - Version 3.2.29.1 Folder = C:\Documents and Settings\Monika\Desktop

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 1,22 Gb Available Physical Memory | 61,01% Memory free

3,85 Gb Paging File | 3,24 Gb Available in Paging File | 84,20% Paging File free

Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 232,88 Gb Total Space | 22,11 Gb Free Space | 9,49% Space Free | Partition Type: NTFS

Computer Name: DOM | User Name: Monika | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011-09-19 15:31:00 | 000,582,656 | ---- | M] (OldTimer Tools) – C:\Documents and Settings\Monika\Desktop\OTL.com

PRC - [2011-07-08 10:50:28 | 000,924,632 | ---- | M] (Mozilla Corporation) – C:\Program Files\Mozilla Firefox\firefox.exe

PRC - [2011-05-25 23:07:14 | 024,176,560 | ---- | M] (Dropbox, Inc.) – C:\Documents and Settings\Monika\Application Data\Dropbox\bin\Dropbox.exe

PRC - [2011-04-13 19:22:49 | 000,399,736 | ---- | M] (BitTorrent, Inc.) – C:\Program Files\uTorrent\uTorrent.exe

PRC - [2011-02-23 17:04:20 | 003,451,496 | ---- | M] (AVAST Software) – C:\Program Files\AVAST Software\Avast\AvastUI.exe

PRC - [2011-01-20 12:20:12 | 001,305,408 | ---- | M] (DT Soft Ltd) – C:\Program Files\DAEMON Tools Lite\DTLite.exe

PRC - [2010-12-16 08:19:28 | 012,984,928 | ---- | M] (GG Network S.A.) – C:\Program Files\Gadu-Gadu 10\gg.exe

PRC - [2010-09-02 23:18:02 | 000,255,536 | ---- | M] (McAfee, Inc.) – C:\Program Files\McAfee Security Scan\2.0.189\SSScheduler.exe

PRC - [2010-03-10 14:26:48 | 000,189,728 | ---- | M] (Protexis Inc.) – c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

PRC - [2008-07-03 13:38:24 | 001,033,728 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe

PRC - [2007-03-29 15:09:52 | 000,040,960 | ---- | M] (Tablet Driver) – C:\WINDOWS\system32\WTClient.exe

PRC - [2006-12-20 14:02:32 | 000,053,248 | ---- | M] (Tablet Driver) – C:\WINDOWS\system32\drivers\WTSrv.exe

========== Modules (No Company Name) ==========

MOD - [2011-08-03 10:11:25 | 003,542,616 | ---- | M] () – c:\Program Files\Common Files\Akamai\netsession_win_2da1ebd.dll

MOD - [2011-07-08 10:50:29 | 001,850,328 | ---- | M] () – C:\Program Files\Mozilla Firefox\mozjs.dll

MOD - [2011-05-22 20:21:36 | 000,093,696 | ---- | M] () – C:\Program Files\FileZilla FTP Client\fzshellext.dll

MOD - [2011-03-02 12:40:51 | 000,140,288 | ---- | M] () – C:\Program Files\WinRAR\RarExt.dll

MOD - [2011-02-09 03:56:38 | 000,296,448 | ---- | M] () – C:\Program Files\Notepad++\NppShell_04.dll

MOD - [2010-12-16 08:20:20 | 000,217,696 | ---- | M] () – C:\Program Files\Gadu-Gadu 10\gglog.dll

MOD - [2010-12-16 08:20:18 | 000,123,488 | ---- | M] () – C:\Program Files\Gadu-Gadu 10\ggipcradioproxy.dll

MOD - [2010-12-16 08:20:16 | 000,017,504 | ---- | M] () – C:\Program Files\Gadu-Gadu 10\ggipc.dll

MOD - [2010-12-16 08:20:12 | 000,027,744 | ---- | M] () – C:\Program Files\Gadu-Gadu 10\ggcrypto.dll

MOD - [2010-12-16 08:20:10 | 000,356,960 | ---- | M] () – C:\Program Files\Gadu-Gadu 10\ggcommon.dll

MOD - [2010-11-04 08:51:44 | 000,555,624 | ---- | M] () – C:\Program Files\NVIDIA Corporation\nView\nvShell.dll

MOD - [2010-08-06 22:01:42 | 002,404,352 | ---- | M] () – C:\Program Files\Gadu-Gadu 10\QtCore4.dll

MOD - [2010-08-06 22:01:42 | 001,515,520 | ---- | M] () – C:\Program Files\Gadu-Gadu 10\QtScript4.dll

MOD - [2010-08-06 22:01:42 | 001,040,384 | ---- | M] () – C:\Program Files\Gadu-Gadu 10\QtNetwork4.dll

MOD - [2010-08-06 22:01:42 | 000,389,120 | ---- | M] () – C:\Program Files\Gadu-Gadu 10\QtXml4.dll

MOD - [2010-08-06 22:01:42 | 000,323,584 | ---- | M] () – C:\Program Files\Gadu-Gadu 10\QtSvg4.dll

MOD - [2010-08-06 22:01:40 | 013,553,664 | ---- | M] () – C:\Program Files\Gadu-Gadu 10\QtWebKit4.dll

MOD - [2010-08-06 22:01:38 | 008,818,688 | ---- | M] () – C:\Program Files\Gadu-Gadu 10\QtGui4.dll

MOD - [2010-08-06 22:01:22 | 003,334,144 | ---- | M] () – C:\Program Files\Gadu-Gadu 10\QtXmlPatterns4.dll

MOD - [2010-08-06 22:00:32 | 000,311,296 | ---- | M] () – C:\Program Files\Gadu-Gadu 10\imageformats\qtiff4.dll

MOD - [2010-08-06 22:00:32 | 000,274,432 | ---- | M] () – C:\Program Files\Gadu-Gadu 10\imageformats\qmng4.dll

MOD - [2010-08-06 22:00:32 | 000,143,360 | ---- | M] () – C:\Program Files\Gadu-Gadu 10\imageformats\qjpeg4.dll

MOD - [2010-08-06 22:00:32 | 000,027,648 | ---- | M] () – C:\Program Files\Gadu-Gadu 10\imageformats\qgif4.dll

MOD - [2010-08-06 22:00:32 | 000,018,944 | ---- | M] () – C:\Program Files\Gadu-Gadu 10\imageformats\qsvg4.dll

MOD - [2010-07-14 07:48:35 | 001,292,288 | ---- | M] () – C:\WINDOWS\system32\quartz.dll

MOD - [2010-07-04 22:32:38 | 000,010,752 | ---- | M] () – C:\Program Files\Unlocker\UnlockerCOM.dll

MOD - [2010-03-19 10:33:38 | 000,059,904 | ---- | M] () – C:\Program Files\Gadu-Gadu 10\zlib1.dll

MOD - [2009-10-28 06:40:14 | 003,885,984 | ---- | M] () – C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

MOD - [2009-02-27 20:04:20 | 000,311,296 | ---- | M] () – C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL

MOD - [2008-04-14 14:00:00 | 000,059,904 | ---- | M] () – C:\WINDOWS\system32\devenum.dll

MOD - [2008-04-14 14:00:00 | 000,014,336 | ---- | M] () – C:\WINDOWS\system32\msdmo.dll

========== Win32 Services (SafeList) ==========

SRV - [2011-08-03 10:11:25 | 003,542,616 | ---- | M] () [Auto | Running] – c:\Program Files\Common Files\Akamai\netsession_win_2da1ebd.dll – (Akamai)

SRV - [2011-02-23 17:04:19 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Stopped] – C:\Program Files\AVAST Software\Avast\AvastSvc.exe – (avast! Antivirus)

SRV - [2010-09-02 23:18:02 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] – C:\Program Files\McAfee Security Scan\2.0.189\McCHSvc.exe – (McComponentHostService)

SRV - [2010-03-10 14:26:48 | 000,189,728 | ---- | M] (Protexis Inc.) [Auto | Running] – c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe – (PSI_SVC_2)

SRV - [2010-02-19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe – (SwitchBoard)

SRV - [2006-12-20 14:02:32 | 000,053,248 | ---- | M] (Tablet Driver) [Auto | Running] – C:\WINDOWS\system32\drivers\WTSrv.exe – (WinTabService)

========== Driver Services (SafeList) ==========

DRV - [2011-04-12 20:21:35 | 000,428,088 | ---- | M] () [Kernel | Boot | Running] – C:\WINDOWS\System32\Drivers\sptd.sys – (sptd)

DRV - [2011-04-06 15:33:50 | 006,388,328 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RtkHDAud.sys – (IntcAzAudAddService) Service for Realtek HD Audio (WDM)

DRV - [2011-03-09 10:30:13 | 000,074,280 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] – C:\WINDOWS\System32\drivers\si3112.sys – (Si3112)

DRV - [2011-02-23 16:56:55 | 000,371,544 | ---- | M] (AVAST Software) [File_System | System | Running] – C:\WINDOWS\System32\drivers\aswSnx.sys – (aswSnx)

DRV - [2011-02-23 16:56:45 | 000,301,528 | ---- | M] (AVAST Software) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\aswSP.sys – (aswSP)

DRV - [2011-02-23 16:55:49 | 000,049,240 | ---- | M] (AVAST Software) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\aswTdi.sys – (aswTdi)

DRV - [2011-02-23 16:55:47 | 000,102,232 | ---- | M] (AVAST Software) [File_System | Auto | Running] – C:\WINDOWS\System32\drivers\aswmon2.sys – (aswMon2)

DRV - [2011-02-23 16:55:10 | 000,025,432 | ---- | M] (AVAST Software) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\aswRdr.sys – (aswRdr)

DRV - [2011-02-23 16:54:57 | 000,030,680 | ---- | M] (AVAST Software) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\aavmker4.sys – (Aavmker4)

DRV - [2011-02-23 16:54:55 | 000,019,544 | ---- | M] (AVAST Software) [File_System | Auto | Running] – C:\WINDOWS\System32\drivers\aswFsBlk.sys – (aswFsBlk)

DRV - [2009-11-18 07:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\Monfilt.sys – (Monfilt)

DRV - [2009-11-18 07:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\Ambfilt.sys – (Ambfilt)

DRV - [2007-03-08 18:09:50 | 000,009,342 | ---- | M] (PenTablet Driver) [Kernel | On_Demand | Stopped] – C:\WINDOWS\System32\Drivers\PTSimHid.sys – (PTSimHid)

DRV - [2007-01-18 16:27:54 | 000,011,470 | ---- | M] (Tablet Driver) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\UCTblHid.sys – (UCTblHid)

DRV - [2006-12-21 19:26:46 | 000,012,622 | ---- | M] (PenTablet Driver) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\PTSimBus.sys – (PTSimBus)

DRV - [2006-12-20 16:50:02 | 000,017,422 | ---- | M] (Tablet Driver) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\TClass2k.sys – (TClass2k)

DRV - [2006-08-14 21:09:48 | 000,083,200 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\Rtenicxp.sys – (RTLE8023xp)

DRV - [2002-07-17 08:53:02 | 000,016,877 | ---- | M] (Adaptec) [Kernel | Auto | Running] – C:\WINDOWS\System32\drivers\ASPI32.SYS – (Aspi32)

DRV - [2000-06-13 13:32:02 | 000,015,370 | ---- | M] (Windows ® 2000 DDK provider) [Kernel | On_Demand | Stopped] – C:\WINDOWS\System32\Drivers\Tablet2k.sys – (Tablet2k)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com/

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.google.com/ [binary data]

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: “ProxyEnable” = 0

========== FireFox ==========

FF - prefs.js…browser.startup.homepage: “http://www.mydtzone.com/startpage|chrome://branding/locale/browserconfig.properties”

FF - prefs.js…network.proxy.type: 0

FF - HKLM\Software\MozillaPlugins@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()

FF - HKLM\Software\MozillaPlugins@Apple.com/iTunes,version=: File not found

FF - HKLM\Software\MozillaPlugins@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF - HKLM\Software\MozillaPlugins@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-04-12 21:54:25 | 000,000,000 | —D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0.1\extensions\Components: C:\Program Files\Mozilla Firefox\components [2011-08-02 17:22:12 | 000,000,000 | —D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0.1\extensions\Plugins: C:\Program Files\Mozilla Firefox\plugins

FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\mozilla_cc@internetdownloadmanager.com: C:\Documents and Settings\Monika\Application Data\IDM\idmmzcc3

[2011-04-12 21:48:18 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Monika\Application Data\mozilla\Extensions

[2011-08-01 18:04:21 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Monika\Application Data\mozilla\Firefox\Profiles\r9xawegb.default\extensions

[2011-08-01 18:04:21 | 000,000,000 | —D | M] (“DAEMON Tools Toolbar”) – C:\Documents and Settings\Monika\Application Data\mozilla\Firefox\Profiles\r9xawegb.default\extensions\DTToolbar@toolbarnet.com

[2011-07-30 17:53:08 | 000,002,055 | ---- | M] () – C:\Documents and Settings\Monika\Application Data\Mozilla\Firefox\Profiles\r9xawegb.default\searchplugins\daemon-search.xml

[2011-08-21 17:56:17 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions

[2011-08-21 17:56:17 | 000,000,000 | —D | M] (Click to call with Skype) – C:\Program Files\Mozilla Firefox\extensions{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

() (No name found) – C:\DOCUMENTS AND SETTINGS\MONIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\R9XAWEGB.DEFAULT\EXTENSIONS\FIREBUG@SOFTWARE.JOEHEWITT.COM.XPI

[2011-07-08 10:50:30 | 000,142,296 | ---- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll

[2010-01-01 11:00:00 | 000,002,767 | ---- | M] () – C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml

[2010-01-01 11:00:00 | 000,001,406 | ---- | M] () – C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml

[2010-01-01 11:00:00 | 000,000,917 | ---- | M] () – C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml

[2010-01-01 11:00:00 | 000,000,858 | ---- | M] () – C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml

[2010-01-01 11:00:00 | 000,001,183 | ---- | M] () – C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml

[2010-01-01 11:00:00 | 000,001,683 | ---- | M] () – C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml

O1 HOSTS File: ([2011-05-19 12:48:08 | 000,000,832 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O1 - Hosts: 127.0.0.1 activate.adobe.com

O1 - Hosts: 127.0.0.1 practivate.adobe.com

O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()

O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O3 - HKLM…\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()

O3 - HKLM…\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()

O3 - HKCU…\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()

O4 - HKLM…\Run: [Adobe ARM] “C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe” File not found

O4 - HKLM…\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)

O4 - HKLM…\Run: [AdobeCS5.5ServiceManager] “C:\Program Files\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe” -launchedbylogin File not found

O4 - HKLM…\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)

O4 - HKLM…\Run: [ctfmon.exe] \WINDOWS\system32\ctfmon.exe File not found

O4 - HKLM…\Run: [HKLM] C:\WINDOWS\system32\Svchost\svchost.exe (Microsoft Corporation)

O4 - HKLM…\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)

O4 - HKLM…\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)

O4 - HKLM…\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe ()

O4 - HKLM…\Run: [switchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)

O4 - HKLM…\Run: [WTClient] C:\WINDOWS\System32\WTClient.exe (Tablet Driver)

O4 - HKCU…\Run: [AdobeBridge] File not found

O4 - HKCU…\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)

O4 - HKCU…\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.)

O4 - HKCU…\Run: [HKCU] C:\WINDOWS\system32\Svchost\svchost.exe (Microsoft Corporation)

O4 - HKCU…\Run: [svchost.exe] C:\Documents and Settings\Monika\Local Settings\Temp\svchost.exe ()

O4 - HKCU…\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)

O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\2.0.189\SSScheduler.exe (McAfee, Inc.)

O4 - Startup: C:\Documents and Settings\Monika\Start Menu\Programs\Startup\Dropbox.lnk = C:\Documents and Settings\Monika\Application Data\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSharedDocuments = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\WINDOWS\system32\Svchost\svchost.exe (Microsoft Corporation)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: disablecad = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsNetHood = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoUserNameInStartMenu = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\WINDOWS\system32\Svchost\svchost.exe (Microsoft Corporation)

O9 - Extra Button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra ‘Tools’ menuitem : Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)

O13 - gopher Prefix: missing

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta … s-i586.cab (Java Plug-in 1.6.0_24)

O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta … s-i586.cab (Java Plug-in 1.6.0_24)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta … s-i586.cab (Java Plug-in 1.6.0_24)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.156.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces{F4F567C8-3ADF-4437-8903-B613DEAEB620}: DhcpNameServer = 192.168.156.1

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)

O24 - Desktop WallPaper: C:\Documents and Settings\Monika\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

O24 - Desktop BackupWallPaper: C:\Documents and Settings\Monika\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2011-04-12 20:21:06 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT – [NTFS]

O33 - MountPoints2{51f38240-85e6-11e0-9535-000fea55012c}\Shell - “” = AutoRun

O33 - MountPoints2{51f38240-85e6-11e0-9535-000fea55012c}\Shell\AutoRun\command - “” = F:\AutoRun.exe

O33 - MountPoints2{51f38245-85e6-11e0-9535-000fea55012c}\Shell - “” = AutoRun

O33 - MountPoints2{51f38245-85e6-11e0-9535-000fea55012c}\Shell\AutoRun\command - “” = E:\AutoRun.exe

O33 - MountPoints2{51f38246-85e6-11e0-9535-000fea55012c}\Shell - “” = AutoRun

O33 - MountPoints2{51f38246-85e6-11e0-9535-000fea55012c}\Shell\AutoRun\command - “” = E:\AutoRun.exe

O33 - MountPoints2{5c9b6d40-c80b-11e0-a2c0-000fea55012c}\Shell - “” = AutoRun

O33 - MountPoints2{5c9b6d40-c80b-11e0-a2c0-000fea55012c}\Shell\AutoRun\command - “” = E:\setup.exe

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM…comfile [open] – “%1” %*

O35 - HKLM…exefile [open] – “%1” %*

O37 - HKLM…com [@ = comfile] – “%1” %*

O37 - HKLM…exe [@ = exefile] – “%1” %*

========== Files/Folders - Created Within 30 Days ==========

[2011-09-19 15:30:58 | 000,582,656 | ---- | C] (OldTimer Tools) – C:\Documents and Settings\Monika\Desktop\OTL.com

[2011-09-15 18:05:33 | 003,392,584 | ---- | C] (McAfee, Inc.) – C:\Documents and Settings\Monika\Desktop\SecurityScan_Release.exe

[2011-09-12 19:18:52 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\RegGenie

[2011-09-12 19:18:51 | 000,000,000 | —D | C] – C:\Program Files\RegGenie

[2011-09-12 19:18:34 | 004,305,840 | ---- | C] (RegGenie.com ) – C:\Documents and Settings\Monika\Desktop\RegGenie_Fix_Errors_Setup.exe

[2011-09-02 21:04:54 | 000,000,000 | —D | C] – C:\Documents and Settings\Monika\Desktop\2

[2011-09-02 21:04:48 | 000,000,000 | —D | C] – C:\Documents and Settings\Monika\Desktop\MONISIA MUZYCZKA

[2011-09-02 17:24:16 | 000,000,000 | —D | C] – C:\Documents and Settings\Monika\Desktop\Wallpapers with views of China 2011

[2011-09-02 16:32:55 | 000,000,000 | —D | C] – C:\Documents and Settings\Monika\Desktop\mt polska dojazdowka

[2011-09-02 11:21:19 | 000,000,000 | —D | C] – C:\WINDOWS\XSxS

[2011-09-02 11:21:19 | 000,000,000 | —D | C] – C:\Documents and Settings\Monika\Desktop\Photoshop

[2011-09-02 11:21:12 | 171,502,133 | ---- | C] (Adobe Systems, Incorporated) – C:\Documents and Settings\Monika\Desktop\Photoshop.exe

[2011-09-01 19:55:55 | 000,000,000 | —D | C] – C:\Documents and Settings\Monika\Desktop\Vector_sketch_3

[2011-09-01 19:14:26 | 000,000,000 | —D | C] – C:\cart_ct_anm_vct

[2011-09-01 17:08:52 | 000,000,000 | —D | C] – C:\Eraser

[2011-09-01 11:09:05 | 000,000,000 | —D | C] – C:\Paint_paint

[2011-08-31 17:51:26 | 000,000,000 | —D | C] – C:\Program Files\PDF Combiner

[2011-08-31 17:51:26 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\PDF Combiner

[2011-08-31 17:40:27 | 002,708,312 | ---- | C] (Igor Pavlov) – C:\Documents and Settings\Monika\Desktop\PDFCombiner-Installation.exe

[2011-08-31 17:18:59 | 000,000,000 | —D | C] – C:\Documents and Settings\Monika\Desktop\001inschoolkit

[2011-08-31 17:03:15 | 000,000,000 | —D | C] – C:\Documents and Settings\Monika\Desktop\y_doski

[2011-08-31 16:31:40 | 000,000,000 | —D | C] – C:\School

[2011-08-24 15:45:02 | 000,000,000 | —D | C] – C:\office_items

[2011-08-21 17:56:01 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Skype

[4 C:\WINDOWS\System32*.tmp files -> C:\WINDOWS\System32*.tmp ->]

[3 C:\WINDOWS*.tmp files -> C:\WINDOWS*.tmp ->]

[1 C:\WINDOWS\System32\drivers*.tmp files -> C:\WINDOWS\System32\drivers*.tmp ->]

[1 C:*.tmp files -> C:*.tmp ->]

========== Files - Modified Within 30 Days ==========

[2011-09-19 15:31:00 | 000,582,656 | ---- | M] (OldTimer Tools) – C:\Documents and Settings\Monika\Desktop\OTL.com

[2011-09-19 14:02:24 | 000,055,794 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\printscreen.JPG

[2011-09-19 13:32:15 | 000,002,048 | --S- | M] () – C:\WINDOWS\bootstat.dat

[2011-09-15 18:05:34 | 003,392,584 | ---- | M] (McAfee, Inc.) – C:\Documents and Settings\Monika\Desktop\SecurityScan_Release.exe

[2011-09-15 18:04:03 | 043,561,840 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\vpsupd.exe

[2011-09-12 21:26:23 | 000,882,437 | ---- | M] () – C:\Documents and Settings\Monika\My Documents\parófku.png

[2011-09-12 21:25:33 | 000,000,000 | ---- | M] () – C:\Documents and Settings\Monika\parófku.png

[2011-09-12 19:39:30 | 000,066,625 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\system_dwojkowy.pdf

[2011-09-12 19:23:28 | 000,009,216 | ---- | M] () – C:\Documents and Settings\Monika\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011-09-12 19:18:52 | 000,000,700 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\RegGenie.lnk

[2011-09-12 19:18:38 | 004,305,840 | ---- | M] (RegGenie.com ) – C:\Documents and Settings\Monika\Desktop\RegGenie_Fix_Errors_Setup.exe

[2011-09-11 12:08:47 | 000,002,206 | ---- | M] () – C:\WINDOWS\System32\wpa.dbl

[2011-09-10 18:34:49 | 000,002,893 | -H-- | M] () – C:\Documents and Settings\Monika\Application Data\Monikalog.dat

[2011-09-10 12:12:49 | 000,472,368 | ---- | M] () – C:\WINDOWS\System32\perfh009.dat

[2011-09-10 12:12:49 | 000,075,462 | ---- | M] () – C:\WINDOWS\System32\perfc009.dat

[2011-09-08 16:12:19 | 031,410,240 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\Funkcja_Kwadratowa.rar

[2011-09-03 22:30:30 | 000,097,874 | ---- | M] () – C:\Documents and Settings\Monika\My Documents\Zdjęcie0123.jpg

[2011-09-03 22:30:06 | 000,000,000 | ---- | M] () – C:\Documents and Settings\Monika\Zdjęcie0123.jpg

[2011-09-03 22:23:09 | 000,000,000 | ---- | M] () – C:\Documents and Settings\Monika\My Documents\SialalaDominiq.png

[2011-09-03 22:23:07 | 000,000,000 | ---- | M] () – C:\Documents and Settings\Monika\SialalaDominiq.png

[2011-09-02 16:57:43 | 104,857,600 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\Wallpapers with views of China 2011.part1.rar

[2011-09-02 16:37:02 | 193,911,202 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\plakat witaj szkolo_malowanie twarzy.psd

[2011-09-02 15:00:28 | 010,398,720 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\plakat3_DRUK.pdf

[2011-09-02 14:58:33 | 005,150,645 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\malowanie workow_DRUK.jpg

[2011-09-02 14:53:11 | 012,359,061 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\plakat1_DRUK.pdf

[2011-09-02 14:50:27 | 011,239,586 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\plakat2_DRUK.pdf

[2011-09-02 14:46:33 | 005,156,624 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\projektowanie planu lekcji_DRUK.jpg

[2011-09-02 14:28:04 | 008,166,578 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\malowanie twarzy_DRUK.jpg

[2011-09-02 14:21:44 | 008,163,460 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\MALOWANIEdruk.jpg

[2011-09-02 14:17:54 | 005,579,742 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\plan lekcji dobre.psd

[2011-09-02 13:01:04 | 000,331,914 | ---- | M] () – C:\nalkejka wata_cukrowa_DRUK.pdf

[2011-09-02 12:59:24 | 000,323,670 | ---- | M] () – C:\nalkejka popcorn_DRUK.pdf

[2011-09-02 12:32:50 | 000,925,766 | ---- | M] () – C:\pl3_DRUK.pdf

[2011-09-02 12:31:53 | 000,885,674 | ---- | M] () – C:\pl2_DRUK.pdf

[2011-09-02 12:30:58 | 000,624,399 | ---- | M] () – C:\pl1_DRUK.pdf

[2011-09-02 12:23:42 | 005,578,917 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\pl3.psd

[2011-09-02 12:23:33 | 005,578,013 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\pl2.psd

[2011-09-02 12:23:15 | 005,576,139 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\pl1.psd

[2011-09-02 12:22:48 | 002,573,021 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\plakat n1.pdf

[2011-09-02 11:42:35 | 000,001,456 | ---- | M] () – C:\Documents and Settings\Monika\Local Settings\Application Data\Adobe Save for Web 12.0 Prefs

[2011-09-02 11:34:33 | 000,073,605 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\plan-lekcji_chłopiec.jpg

[2011-09-02 11:28:02 | 000,000,284 | ---- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job

[2011-09-01 20:15:51 | 008,480,613 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\plan lekcji.jpg

[2011-09-01 18:50:23 | 466,374,023 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\plakat witaj szkolo2.psd

[2011-09-01 18:49:34 | 003,198,728 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\plakat_3.pdf

[2011-09-01 17:31:05 | 004,003,088 | ---- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT

[2011-09-01 14:54:49 | 012,565,421 | ---- | M] () – C:\skorosze_wrzesien_internet.pdf

[2011-09-01 14:51:12 | 000,905,819 | ---- | M] () – C:\centrum skorosze_wrzesnien_DRUK_strona3.pdf

[2011-09-01 10:58:39 | 001,761,274 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\worek.png

[2011-09-01 10:58:38 | 000,000,132 | ---- | M] () – C:\Documents and Settings\Monika\Application Data\Adobe PNG Format CS5 Prefs

[2011-09-01 10:48:13 | 000,499,950 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\akcesoria,multisport,umbro-worek-na-buty-komplet,2187605-big.png

[2011-08-31 18:51:05 | 287,787,811 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\plakat witaj szkolo.psd

[2011-08-31 18:29:20 | 002,015,755 | ---- | M] () – C:\centrum skorosze_wrzesnien_DRUK_strona4.pdf

[2011-08-31 18:00:59 | 000,570,618 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\527297_65692438.jpg

[2011-08-31 17:40:27 | 002,708,312 | ---- | M] (Igor Pavlov) – C:\Documents and Settings\Monika\Desktop\PDFCombiner-Installation.exe

[2011-08-31 17:32:31 | 004,282,229 | ---- | M] () – C:\Documents and Settings\Monika\Desktop\plakat1.pdf

[4 C:\WINDOWS\System32*.tmp files -> C:\WINDOWS\System32*.tmp ->]

[3 C:\WINDOWS*.tmp files -> C:\WINDOWS*.tmp ->]

[1 C:\WINDOWS\System32\drivers*.tmp files -> C:\WINDOWS\System32\drivers*.tmp ->]

[1 C:*.tmp files -> C:*.tmp ->]

========== Files Created - No Company Name ==========

[2011-09-19 14:02:11 | 000,055,794 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\printscreen.JPG

[2011-09-15 18:02:48 | 043,561,840 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\vpsupd.exe

[2011-09-12 21:25:46 | 000,882,437 | ---- | C] () – C:\Documents and Settings\Monika\My Documents\parófku.png

[2011-09-12 21:25:33 | 000,000,000 | ---- | C] () – C:\Documents and Settings\Monika\parófku.png

[2011-09-12 19:39:29 | 000,066,625 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\system_dwojkowy.pdf

[2011-09-12 19:18:52 | 000,299,544 | ---- | C] () – C:\WINDOWS\RegGenieOnUninstall.exe

[2011-09-12 19:18:52 | 000,000,700 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\RegGenie.lnk

[2011-09-08 16:12:28 | 008,909,158 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\Funkcja kwadratowa rozwiązania maturalne.pdf

[2011-09-08 16:12:27 | 014,712,121 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\Funkcja kwadratowa.pdf

[2011-09-08 16:12:27 | 007,791,312 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\Funkcja kwadratowa rozwiązania.pdf

[2011-09-08 16:12:13 | 031,410,240 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\Funkcja_Kwadratowa.rar

[2011-09-03 22:30:13 | 000,097,874 | ---- | C] () – C:\Documents and Settings\Monika\My Documents\Zdjęcie0123.jpg

[2011-09-03 22:30:06 | 000,000,000 | ---- | C] () – C:\Documents and Settings\Monika\Zdjęcie0123.jpg

[2011-09-03 22:23:09 | 000,000,000 | ---- | C] () – C:\Documents and Settings\Monika\My Documents\SialalaDominiq.png

[2011-09-03 22:23:07 | 000,000,000 | ---- | C] () – C:\Documents and Settings\Monika\SialalaDominiq.png

[2011-09-02 16:50:28 | 104,857,600 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\Wallpapers with views of China 2011.part1.rar

[2011-09-02 15:00:18 | 010,398,720 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\plakat3_DRUK.pdf

[2011-09-02 14:58:26 | 005,150,645 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\malowanie workow_DRUK.jpg

[2011-09-02 14:44:10 | 011,239,586 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\plakat2_DRUK.pdf

[2011-09-02 14:41:26 | 005,156,624 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\projektowanie planu lekcji_DRUK.jpg

[2011-09-02 14:33:14 | 012,359,061 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\plakat1_DRUK.pdf

[2011-09-02 14:27:58 | 008,166,578 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\malowanie twarzy_DRUK.jpg

[2011-09-02 14:21:39 | 008,163,460 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\MALOWANIEdruk.jpg

[2011-09-02 14:17:52 | 005,579,742 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\plan lekcji dobre.psd

[2011-09-02 13:47:21 | 193,911,202 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\plakat witaj szkolo_malowanie twarzy.psd

[2011-09-02 12:50:51 | 000,331,914 | ---- | C] () – C:\nalkejka wata_cukrowa_DRUK.pdf

[2011-09-02 12:50:51 | 000,323,670 | ---- | C] () – C:\nalkejka popcorn_DRUK.pdf

[2011-09-02 12:29:47 | 000,925,766 | ---- | C] () – C:\pl3_DRUK.pdf

[2011-09-02 12:28:45 | 000,885,674 | ---- | C] () – C:\pl2_DRUK.pdf

[2011-09-02 12:26:22 | 000,624,399 | ---- | C] () – C:\pl1_DRUK.pdf

[2011-09-02 12:23:41 | 005,578,917 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\pl3.psd

[2011-09-02 12:23:33 | 005,578,013 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\pl2.psd

[2011-09-02 12:23:13 | 005,576,139 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\pl1.psd

[2011-09-02 12:22:37 | 002,573,021 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\plakat n1.pdf

[2011-09-02 11:34:33 | 000,073,605 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\plan-lekcji_chłopiec.jpg

[2011-09-01 18:49:26 | 003,198,728 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\plakat_3.pdf

[2011-09-01 17:49:55 | 466,374,023 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\plakat witaj szkolo2.psd

[2011-09-01 14:54:47 | 012,565,421 | ---- | C] () – C:\skorosze_wrzesien_internet.pdf

[2011-09-01 10:58:37 | 001,761,274 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\worek.png

[2011-09-01 10:48:06 | 000,499,950 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\akcesoria,multisport,umbro-worek-na-buty-komplet,2187605-big.png

[2011-08-31 20:40:19 | 000,513,240 | ---- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-57989841-1580818891-1801674531-1003-0.dat

[2011-08-31 20:40:17 | 000,463,018 | ---- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat

[2011-08-31 18:50:36 | 287,787,811 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\plakat witaj szkolo.psd

[2011-08-31 18:29:20 | 002,015,755 | ---- | C] () – C:\centrum skorosze_wrzesnien_DRUK_strona4.pdf

[2011-08-31 18:27:40 | 000,905,819 | ---- | C] () – C:\centrum skorosze_wrzesnien_DRUK_strona3.pdf

[2011-08-31 17:59:53 | 000,570,618 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\527297_65692438.jpg

[2011-08-31 17:32:17 | 004,282,229 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\plakat1.pdf

[2011-08-31 16:34:48 | 008,480,613 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\plan lekcji.jpg

[2011-08-29 18:50:17 | 000,531,218 | ---- | C] () – C:\Documents and Settings\Monika\Desktop\green_up_content_7.jpg

[2011-08-04 21:43:07 | 000,000,000 | ---- | C] () – C:\Documents and Settings\Monika\Application Data\chrtmp

[2011-07-30 13:36:24 | 000,000,038 | ---- | C] () – C:\WINDOWS\avisplitter.ini

[2011-07-30 13:36:20 | 000,650,752 | ---- | C] () – C:\WINDOWS\System32\xvidcore.dll

[2011-07-30 13:36:20 | 000,243,200 | ---- | C] () – C:\WINDOWS\System32\xvidvfw.dll

[2011-07-30 13:36:19 | 000,074,752 | ---- | C] () – C:\WINDOWS\System32\ff_vfw.dll

[2011-07-27 15:51:10 | 000,036,864 | ---- | C] () – C:\WINDOWS\System32\lhtool.exe

[2011-07-27 15:20:51 | 000,045,056 | ---- | C] () – C:\WINDOWS\System32\ucinst32.dll

[2011-07-05 16:56:52 | 000,068,040 | -H-- | C] () – C:\WINDOWS\System32\mlfcache.dat

[2011-05-31 10:44:12 | 000,414,232 | ---- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat

[2011-05-30 13:37:35 | 000,000,132 | ---- | C] () – C:\Documents and Settings\Monika\Application Data\Adobe PNG Format CS5 Prefs

[2011-05-24 15:08:13 | 000,001,456 | ---- | C] () – C:\Documents and Settings\Monika\Local Settings\Application Data\Adobe Save for Web 12.0 Prefs

[2011-05-12 20:10:02 | 000,175,616 | ---- | C] () – C:\WINDOWS\System32\unrar.dll

[2011-05-12 19:49:39 | 000,009,216 | ---- | C] () – C:\Documents and Settings\Monika\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011-05-04 20:06:43 | 000,723,981 | ---- | C] () – C:\Documents and Settings\Monika\Local Settings\Application Data\unins000.exe

[2011-05-04 20:06:43 | 000,002,154 | ---- | C] () – C:\Documents and Settings\Monika\Local Settings\Application Data\unins000.dat

[2011-04-13 21:19:23 | 000,049,152 | ---- | C] () – C:\WINDOWS\System32\ChCfg.exe

[2011-04-12 23:06:09 | 000,004,161 | ---- | C] () – C:\WINDOWS\ODBCINST.INI

[2011-04-12 23:02:55 | 004,003,088 | ---- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT

[2011-04-12 22:00:58 | 000,000,056 | -H-- | C] () – C:\WINDOWS\System32\ezsidmv.dat

[2011-04-12 21:48:08 | 000,000,000 | ---- | C] () – C:\WINDOWS\nsreg.dat

[2011-04-12 20:37:30 | 000,252,080 | ---- | C] () – C:\WINDOWS\System32\nvdrsdb0.bin

[2011-04-12 20:37:28 | 000,252,080 | ---- | C] () – C:\WINDOWS\System32\nvdrsdb1.bin

[2011-04-12 20:37:28 | 000,000,001 | ---- | C] () – C:\WINDOWS\System32\nvdrssel.bin

[2011-04-12 20:37:23 | 002,292,678 | ---- | C] () – C:\WINDOWS\System32\nvdata.bin

[2011-04-12 20:24:50 | 000,002,048 | --S- | C] () – C:\WINDOWS\bootstat.dat

[2011-04-12 20:18:07 | 000,021,640 | ---- | C] () – C:\WINDOWS\System32\emptyregdb.dat

[2011-04-12 20:17:39 | 000,100,352 | ---- | C] () – C:\WINDOWS\System32\zlib1.dll

[2011-04-12 20:17:29 | 000,162,304 | ---- | C] () – C:\WINDOWS\System32\libpng13.dll

[2009-03-05 21:18:34 | 000,006,144 | ---- | C] () – C:\WINDOWS\System32\FontReg.exe

[2008-04-14 14:00:00 | 013,107,200 | ---- | C] () – C:\WINDOWS\System32\oembios.bin

[2008-04-14 14:00:00 | 000,673,088 | ---- | C] () – C:\WINDOWS\System32\mlang.dat

[2008-04-14 14:00:00 | 000,472,368 | ---- | C] () – C:\WINDOWS\System32\perfh009.dat

[2008-04-14 14:00:00 | 000,272,128 | ---- | C] () – C:\WINDOWS\System32\perfi009.dat

[2008-04-14 14:00:00 | 000,218,003 | ---- | C] () – C:\WINDOWS\System32\dssec.dat

[2008-04-14 14:00:00 | 000,075,462 | ---- | C] () – C:\WINDOWS\System32\perfc009.dat

[2008-04-14 14:00:00 | 000,046,258 | ---- | C] () – C:\WINDOWS\System32\mib.bin

[2008-04-14 14:00:00 | 000,028,626 | ---- | C] () – C:\WINDOWS\System32\perfd009.dat

[2008-04-14 14:00:00 | 000,004,569 | ---- | C] () – C:\WINDOWS\System32\secupd.dat

[2008-04-14 14:00:00 | 000,004,463 | ---- | C] () – C:\WINDOWS\System32\oembios.dat

[2008-04-14 14:00:00 | 000,001,804 | ---- | C] () – C:\WINDOWS\System32\Dcache.bin

[2008-04-14 14:00:00 | 000,000,741 | ---- | C] () – C:\WINDOWS\System32\noise.dat

[2006-05-06 02:16:58 | 000,002,893 | -H-- | C] () – C:\Documents and Settings\Monika\Application Data\Monikalog.dat

[1996-04-03 22:33:26 | 000,005,248 | ---- | C] () – C:\WINDOWS\System32\giveio.sys

< End of report >

Przesyłam raport

spandaupol · 19 Wrzesień 2011 13:16

W okno Własne opcje skanowania / skrypt w OTL wklej:

:OTL O4 - HKLM…\Run: [Adobe ARM] “C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe” File not found O4 - HKLM…\Run: [ctfmon.exe] \WINDOWS\system32\ctfmon.exe File not found O4 - HKLM…\Run: [HKLM] C:\WINDOWS\system32\Svchost\svchost.exe (Microsoft Corporation) O4 - HKCU…\Run: [AdobeBridge] File not found O4 - HKCU…\Run: [HKCU] C:\WINDOWS\system32\Svchost\svchost.exe (Microsoft Corporation) O4 - HKCU…\Run: [svchost.exe] C:\Documents and Settings\Monika\Local Settings\Temp\svchost.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\WINDOWS\system32\Svchost\svchost.exe (Microsoft Corporation) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\WINDOWS\system32\Svchost\svchost.exe (Microsoft Corporation) :Commands [emptytemp]

Klikasz na Wykonaj skrypt. Zgadzasz się na restart komputera. Log z usuwania na forum

Następnie ponownie uruchamiasz OTL klikasz raz jeszcze Skanuj i dajesz nowy log na forum Czyli dwa logi jeden z usuwania drugi z nowego skanowania po usuwaniu. Logi wklej na http://www.wklej.org a w poście podaj linka do wklejki

monirra89 · 19 Wrzesień 2011 13:50

http://www.wklej.org/id/596359

spandaupol · 19 Wrzesień 2011 13:54

monirra89 , Jak wkleiłaś skrypt masz kliknąć Wykonaj skrypt Skrypt zaczyna się od :OTL musi być dwukropek na początku Proszę powtórzyć usuwanie

monirra89 · 19 Wrzesień 2011 13:57

co to taskbar activate jest niby uruchomiony ale niewidoczny, widzę go tylko w menadżerze zadań…

– Dodane 19.09.2011 (Pn) 16:23 –

Tak też zrobiłam… wykonaj skrypt na 100% . Dwukropek też był… komputer się zrestartował, pytał czy może uruchomić otl po czym wyskoczyło kilka czarnych okienek ( nie wiem jak to się nazywa) i plik txt znowu z tym samym błędem…

spandaupol · 19 Wrzesień 2011 14:28

Spróbuj proszę pobrać Malwarebytes http://www.dobreprogramy.pl/Malwarebyte … 13117.html Jak się uda zainstaluj wykonaj pełny skan Usuń co znajdzie program podaj raport na forum Jak się nie uda pobrać proszę pisać.

monirra89 · 19 Wrzesień 2011 15:03

po instalacji i probie uruchomienia programu wyskoczyl blad: run-time error ‘372’ failed to lad control 'vbalGrid" from vbalsgrid6.ocx You version of vbsldgrid6.ocx may be outdated (…)

spandaupol · 19 Wrzesień 2011 15:16

Spróbujemy inaczej

Ponieważ nie działa Ci kopiuj wklej plik fix.txt pobierz stąd http://hostuje.net/file.php?id=92f921ff … d813539941 i zapisz na dysku C:\

Następnie wejdź w tryb awaryjny windows http://www.cybertrash.pl/Tata/Wiedza/tr … ryjny.html punkt 1 Uruchom OTL nic nie wklejaj klikasz Wykonaj skrypt Klikasz OK by załadować skrypt Podajesz ścieżkę do pliku Czyli Szukaj w wybierasz dysk *C:* i Otwórz

monirra89 · 20 Wrzesień 2011 12:40

chyba się udało…

http://www.wklej.org/id/596359/

– Dodane 20.09.2011 (Wt) 14:42 –

nie ten link,

http://www.wklej.org/id/596870/

ten jest wlasciwy

spandaupol · 20 Wrzesień 2011 12:57

Tak udało się Teraz spróbujemy normalnie usunąć resztę, zobaczymy czy pójdzie Jeśli nie zmienimy metodę

W okno Własne opcje skanowania / skrypt w OTL wklej:

Klikasz na Wykonaj skrypt. Zgadzasz się na restart komputera. Log z usuwania na forum

Następnie ponownie uruchamiasz OTL klikasz raz jeszcze Skanuj i dajesz nowy log na forum Czyli dwa logi jeden z usuwania drugi z nowego skanowania po usuwaniu.

monirra89 · 20 Wrzesień 2011 16:46

Wkejenie tego skryptu pomogło - pojawia się już pasek startu, działa też kopiuj i wklej, tylko ikony dalej są “rozwalone” Później jak chciałam przeskanować OTL komputer to się strasznie wieszał - za to uruchomił się Malwarebytes’ Anti-Malware - wykrył kilka zagrożeń podaję raport z niego:

http://wklej.org/id/597013/

dziękuję bardzo za pomoc !

spandaupol · 21 Wrzesień 2011 07:31

Usuń to co znalazł Malwarebytes (to było szybkie nie pełne skanowanie)

Uruchom OTL klikasz Sprzątanie To usunie OTL’a wraz z jego kwarantanną

Ponieważ nie działają Ci programy pobierzesz i użyjesz narzędzie Rkill instrukcja http://www.fixitpc.pl/topic/5-dezynfekc … czesc-1/#4 raport z narzędzia podaj na forum

Następnie pobierzesz i wykonasz pełne skanowanie Dr.WEB CureIt! Jeśli skaner znajdzie infekcje w plikach exe proszę wszystko leczyć Oczywiście czego nie będzie można wyleczyć usuwasz

Jeśli DrWebCureIt nic nie znajdzie pobierzesz i uruchomisz OTL klikasz Skanuj raport ze skanu podasz na forum

Sprecyzuj proszę. Ponieważ pojawił się pasek zadań ikony mogły zmienić swoje położenie Spróbuj poukładać je na pulpicie następnie w dowolnym miejscu pulpitu klikasz prawym przyciskiem myszy z menu wybierasz Odśwież, przyznam że nie jestem jednak pewien, czy o to chodzi?