Ping w cs, w wątku log

Dla specjalistów Bezpieczeństwo
#1

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 18:47:43, on 2009-12-25

Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)

MSIE: Unable to get Internet Explorer version!

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Documents and Settings\Jeleń\ydm.exe

C:\WINDOWS\explorer.exe

C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe

C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\Windows\msnmger.exe

C:\Windows\system32\nvscv32.exe

C:\Program Files\NVIDIA Corporation\nView\nwiz.exe

C:\Program Files\HP\Digital Imaging\bin\hpqsrmon.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program Files\AMD\amd_dc_opt\amd_dc_opt.exe

C:\Windows\smms.exe

C:\WINDOWS\system32\28463\YOYL.exe

C:\windows\nsvsc32.exe

C:\WINDOWS\system32\28463\yoyl.exe

C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\isu.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\ALLPlayer\ALLUpdate.exe

C:\Documents and Settings\Jeleń\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe

C:\Program Files\RocketDock\rocketdock .exe

C:\Program Files\HP\HP Software Update\hpwuschd2.exe

C:\Program Files\HP\HP Software Update\hpwuschd2 .exe

C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe

C:\Program Files\Common Files\Ahead\Lib\nerocheck.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\Program Files\Common Files\Real\Update_OB\realsched .exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\Program Files\Java\jre6\bin\jusched .exe

C:\Windows\smms.exe

C:\Program Files\NVIDIA Corporation\nView\nwiz.exe

C:\Windows\msnmger.exe

C:\Program Files\AMD\amd_dc_opt\amd_dc_opt.exe

C:\Windows\msnmger .exe

C:\Windows\smms .exe

C:\Documents and Settings\Jeleń\rundll32.exe

C:\Program Files\ALLPlayer\allupdate.exe

C:\Program Files\RocketDock\rocketdock .exe

C:\WINDOWS\system32\isu.exe

C:\Program Files\Common Files\Ahead\Lib\nmbgmonitor.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe

C:\WINDOWS\system\svchost.exe

C:\WINDOWS\system\wupdmgr.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\WINDOWS\system32\svchost.exe

c:\program files\adobe\acrotray.exe

c:\program files\adobe\acrotray.exe

c:\program files\adobe\acrotray .exe

c:\program files\adobe\acrotray .exe

C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe

C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

C:\Documents and Settings\Jeleń\Ustawienia lokalne\Dane aplikacji\Google\Update\googleupdate.exe

C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

C:\Program Files\Gadu-Gadu 10\spellchecker_gg.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Gadu-Gadu 10\gg .exe

C:\Program Files\Counter-Strike 1.6\hl.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.bearshare.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza

R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll

R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)

R3 - URLSearchHook: (no name) - {2c650b7d-aa32-4798-af1a-fd8ef806d89f} - (no file)

R3 - URLSearchHook: (no name) - {41fe951c-2aaf-4f08-ab67-aebd1ed636f2} - (no file)

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\Documents and Settings\Jeleń\ydm.exe \s

O1 - Hosts: 172.0.0.2 http://1m4ge.info/vote.php

O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_1.dll

O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Adobe PDF Interpreter - {0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2} - C:\Program Files\WinBudget\bin\Acrord32.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file)

O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll

O2 - BHO: (no name) - {2c650b7d-aa32-4798-af1a-fd8ef806d89f} - (no file)

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: (no name) - {41fe951c-2aaf-4f08-ab67-aebd1ed636f2} - (no file)

O2 - BHO: (no name) - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - (no file)

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: IEPluginBHO - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Jeleń\Dane aplikacji\Gadu-Gadu 10_userdata\ggbho.2.dll

O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_1.dll

O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)

O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll

O3 - Toolbar: (no name) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - (no file)

O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll

O3 - Toolbar: (no name) - {2c650b7d-aa32-4798-af1a-fd8ef806d89f} - (no file)

O3 - Toolbar: (no name) - {41fe951c-2aaf-4f08-ab67-aebd1ed636f2} - (no file)

O4 - HKLM…\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM…\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe

O4 - HKLM…\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

O4 - HKLM…\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM…\Run: [skyTel] SkyTel.EXE

O4 - HKLM…\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM…\Run: [Adobe Reader Speed Launcher] “C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe”

O4 - HKLM…\Run: [sunJavaUpdateSched] “C:\Program Files\Java\jre6\bin\jusched.exe”

O4 - HKLM…\Run: [TkBellExe] “C:\Program Files\Common Files\Real\Update_OB\realsched.exe” -osboot

O4 - HKLM…\Run: [lol] C:\Windows\msnmger.exe

O4 - HKLM…\Run: [32.exe] C:\Windows\system32\nvscv32.exe

O4 - HKLM…\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install

O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM…\Run: [amd_dc_opt] “C:\Program Files\AMD\amd_dc_opt\amd_dc_opt.exe”

O4 - HKLM…\Run: [Google Updater] C:\Windows\smms.exe

O4 - HKLM…\Run: [YOYL Agent] C:\WINDOWS\system32\28463\YOYL.exe

O4 - HKLM…\Run: [Windows DLL Driver] C:\windows\nsvsc32.exe

O4 - HKLM…\Run: [yoyl Agent] C:\WINDOWS\system32\28463\yoyl .exe

O4 - HKLM…\Run: [btTray] “C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe”

O4 - HKLM…\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM…\Run: [isu] C:\WINDOWS\system32\isu.exe \u

O4 - HKCU…\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU…\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] “C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe”

O4 - HKCU…\Run: [MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background

O4 - HKCU…\Run: [ALLUpdate] “C:\Program Files\ALLPlayer\ALLUpdate.exe” “sleep”

O4 - HKCU…\Run: [Google Update] “C:\Documents and Settings\Jeleń\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe” /c

O4 - HKCU…\Run: [RocketDock] “C:\Program Files\RocketDock\rocketdock .exe”

O4 - HKCU…\Run: [Gadu-Gadu] “C:\Program Files\Gadu-Gadu\gg .exe” /tray

O4 - HKCU…\Run: [Gadu-Gadu 10] “C:\Program Files\Gadu-Gadu 10\gg.exe”

O4 - HKCU…\Run: [Wru] C:\Program Files\Wru\Wru.exe

O4 - HKCU…\Run: [iPLA!] C:\Program Files\ipla\ipla.exe /autorun

O4 - HKUS\S-1-5-19…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘USŁUGA LOKALNA’)

O4 - HKUS\S-1-5-20…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘USŁUGA SIECIOWA’)

O4 - HKUS\S-1-5-18…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SYSTEM’)

O4 - HKUS.DEFAULT…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘Default user’)

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O8 - Extra context menu item: &Block This Image (ABP) - C:\Program Files\Adblock Pro\blockimg.html

O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html

O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Wyslij przez wiadomosc(&M)… - C:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm

O8 - Extra context menu item: Wyślij przez Bluetooth - C:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm

O9 - Extra button: Zaznaczanie HP Smart - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {41ACD49D-1974-791A-0981-AA9872721044} (Ganymede Board Games) - http://cached.gamedesire.com/g_bin/pl/b … 0_0_35.cab

O16 - DPF: {E95CF138-A587-4C54-8175-3AD80997CB14} (GameDesire Soccer) - http://cached.gamedesire.com/g_bin/pl/s … 0_0_20.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\WINDOWS\system32\skype4com.dll

O20 - AppInit_DLLs: c:\progra~1\bandoo\bndhook.dll

O21 - SSODL: mdgYLVNHqKKEERo - {F07B41BA-5AD1-EB10-C89B-5E94C1D3A3AF} - C:\WINDOWS\system32\xsb.dll

O23 - Service: ASKUpgrade - Unknown owner - C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe (file missing)

O23 - Service: BlueSoleilCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe

O23 - Service: BsHelpCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe

O23 - Service: BsMobileCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe

O23 - Service: Usługa Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: CLCV0 (UTSCSI) - Unknown owner - C:\WINDOWS\system32\UTSCSI.EXE

–

End of file - 13393 bytes

#2

Pokaż log z: OTL

Przestawiasz w nim Processes i Modules na All oraz wklejasz w dolne białe okienko Custom Scans/Fixes :

Klikasz Run Scan. - otl-gmer-rsit-dds-inne-instrukcje-t370405.html

Zmiana zasad wklejania logów na forum - viewtopic.php?f=16&t=253052

#3

co to OTL, zielony jestem i nie kapuje :confused:

– Dodane 25.12.2009 (Pt) 19:20 –

ok zaraz wstawie

#4

Masz linka - viewtopic.php?f=16&t=253052

#5

log z pliku Extras.Txt

OTL Extras logfile created on: 2009-12-25 19:22:08 - Run 1

OTL by OldTimer - Version 3.1.20.1 Folder = C:\Documents and Settings\Jeleń\Moje dokumenty\Pobieranie

Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 6.0.2900.5512)

Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

1 023,00 Mb Total Physical Memory | 286,00 Mb Available Physical Memory | 28,00% Memory free

2,00 Gb Paging File | 2,00 Gb Available in Paging File | 73,00% Paging File free

Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 298,08 Gb Total Space | 117,00 Gb Free Space | 39,25% Space Free | Partition Type: NTFS

D: Drive not present or media not loaded

E: Drive not present or media not loaded

F: Drive not present or media not loaded

G: Drive not present or media not loaded

H: Drive not present or media not loaded

I: Drive not present or media not loaded

Computer Name: A-0C891D7FD45D4

Current User Name: Jeleń

Logged in as Administrator.

Current Boot Mode: Normal

Scan Mode: Current user

Company Name Whitelist: Off

Skip Microsoft Files: Off

File Age = 30 Days

Output = Standard

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes]

.html [@ = htmlfile] – Reg Error: Key error. File not found

[HKEY_CURRENT_USER\SOFTWARE\Classes]

.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\shell[command]\command]

batfile [open] – “%1” %*

cmdfile [open] – “%1” %*

comfile [open] – “%1” %*

exefile [open] – “%1” %*

htmlfile [edit] – Reg Error: Key error.

htmlfile [open] – Reg Error: Key error.

htmlfile [opennew] – Reg Error: Key error.

http [open] – Reg Error: Value error.

https [open] – Reg Error: Value error.

piffile [open] – “%1” %*

regfile [merge] – Reg Error: Key error.

scrfile [config] – “%1”

scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)

scrfile [open] – “%1” /S

txtfile [edit] – Reg Error: Key error.

Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [unstopcp] – “C:\Program Files\Roadkil.Net\UnstopCpy_4_2_Win2K_UP.exe” “%1” * (Roadkil.Net)

Directory [Winamp.Bookmark] – “C:\Program Files\Winamp\winamp.exe” /BOOKMARK “%1” (Nullsoft)

Directory [Winamp.Enqueue] – “C:\Program Files\Winamp\winamp.exe” /ADD “%1” (Nullsoft)

Directory [Winamp.Play] – “C:\Program Files\Winamp\winamp.exe” “%1” (Nullsoft)

Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)

Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] – Reg Error: Key error.

CLSID{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] – “C:\Program Files\Internet Explorer\iexplore.exe” File not found

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

“FirstRunDisabled” = 1

“AntiVirusDisableNotify” = 0

“FirewallDisableNotify” = 1

“UpdatesDisableNotify” = 0

“AntiVirusOverride” = 1

“FirewallOverride” = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

“EnableFirewall” = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

“EnableFirewall” = 0

“DisableNotifications” = 0

“DoNotAllowExceptions” = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

“27016:UDP” = 27016:UDP:*:Enabled:27016

“8461:TCP” = 8461:TCP:*:Enabled:GoD High Port

“8462:TCP” = 8462:TCP:*:Enabled:GoD Low Port

“1900:UDP” = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007

“2869:TCP” = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008

“139:TCP” = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004

“445:TCP” = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005

“137:UDP” = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001

“138:UDP” = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

“C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe” = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe – (Hewlett-Packard Co.)

“C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe” = C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe – (Hewlett-Packard Co.)

“C:\Program Files\HP\Digital Imaging\bin\hposid01.exe” = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe – (Hewlett-Packard Co.)

“C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe” = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe – (Hewlett-Packard)

“C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe” = C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe – (Hewlett-Packard)

“C:\Program Files\uTorrent\uTorrent.exe” = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent – (BitTorrent, Inc.)

“C:\Documents and Settings\Jeleń\Pulpit\utorrent.exe” = C:\Documents and Settings\Jeleń\Pulpit\utorrent.exe:*:Enabled:µTorrent – File not found

“C:\Documents and Settings\Jeleń\Pulpit\Programy\utorrent.exe” = C:\Documents and Settings\Jeleń\Pulpit\Programy\utorrent.exe:*:Enabled:µTorrent – File not found

“C:\Program Files\Valve\hlds.exe” = C:\Program Files\Valve\hlds.exe:*:Enabled:hlds – File not found

“C:\Program Files\Valve\hl.exe” = C:\Program Files\Valve\hl.exe:*:Disabled:hl – File not found

“C:\Program Files\WapSter\AQQ\AQQ.exe” = C:\Program Files\WapSter\AQQ\AQQ.exe:*:Enabled:P2P AQQ – File not found

“C:\Program Files\Gadu-Gadu\gg.exe” = C:\Program Files\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program główny – ()

“C:\Documents and Settings\Jeleń\Pulpit\filip\gry\CS\cstrike.exe” = C:\Documents and Settings\Jeleń\Pulpit\filip\gry\CS\cstrike.exe:*:Enabled:Counter-Strike Launcher – (Non Steam Powered)

“C:\Documents and Settings\Jeleń\Pulpit\filip\gry\CS\hlds.exe” = C:\Documents and Settings\Jeleń\Pulpit\filip\gry\CS\hlds.exe:*:Disabled:HLDS Launcher – (Valve)

“C:\Documents and Settings\Jeleń\Moje dokumenty\GoD\GoD.exe” = C:\Documents and Settings\Jeleń\Moje dokumenty\GoD\GoD.exe:*:Disabled:GoD – File not found

“C:\Program Files\THQ\FSW Ten Hammers\fsw2.exe” = C:\Program Files\THQ\FSW Ten Hammers\fsw2.exe:*:Disabled:“Full Spectrum Warrrior 2: Ten Hammers” Game – File not found

“C:\Program Files\Counter-Strike 1.6\hl.exe” = C:\Program Files\Counter-Strike 1.6\hl.exe:*:Enabled:Half-Life Launcher – (Valve)

“C:\Program Files\Xfire\Xfire.exe” = C:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire – (Xfire Inc.)

“C:\Program Files\Counter-Strike 1.6\hlds.exe” = C:\Program Files\Counter-Strike 1.6\hlds.exe:*:Enabled:HLDS Launcher – (Valve)

“C:\Windows\system32\nvscv32.exe” = C:\Windows\system32\nvscv32.exe:*:Enabled:Windows Boot Device – ()

“C:\Windows\msnmger.exe” = C:\Windows\msnmger.exe:*:Enabled:Windows Serivce Pack Updater – ()

“C:\Program Files\VoipStunt.com\VoipStunt\VoipStunt.exe” = C:\Program Files\VoipStunt.com\VoipStunt\VoipStunt.exe:*:Enabled:VoipStunt – File not found

“C:\Program Files\FreeCall.com\FreeCall\FreeCall.exe” = C:\Program Files\FreeCall.com\FreeCall\FreeCall.exe:*:Enabled:FreeCall – File not found

“C:\Program Files\VoipBuster.com\VoipBuster\VoipBuster.exe” = C:\Program Files\VoipBuster.com\VoipBuster\VoipBuster.exe:*:Enabled:VoipBuster – File not found

“C:\Windows\smms.exe” = C:\Windows\smms.exe:*:Enabled:WindowsUpdateService – ()

“C:\Program Files\Nowe Gadu-Gadu\gg.exe” = C:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu – File not found

“C:\Program Files\Gadu-Gadu 10\gg.exe” = C:\Program Files\Gadu-Gadu 10\gg.exe:*:Enabled:Gadu-Gadu 10 – ()

“C:\windows\nsvsc32.exe” = C:\windows\nsvsc32.exe:*:Enabled:Plug-N-PlayDeviceDriver – ()

“C:\WINDOWS\system32\vjnn.exe” = C:\WINDOWS\system32\vjnn.exe:*:Enabled:ENABLE – File not found

“C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe” = C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe:*:Enabled:BlueSoleilCS – ()

“C:\WINDOWS\system32\vjnn .exe” = C:\WINDOWS\system32\vjnn .exe:*:Enabled:ENABLE – ()

“C:\WINDOWS\system32\isu.exe” = C:\WINDOWS\system32\isu.exe:*:Enabled:ENABLE – ()

“C:\Documents and Settings\Jeleń\ydm.exe” = C:\Documents and Settings\Jeleń\ydm.exe:*:Enabled:ENABLE – ()

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

“{0F7C2E47-089E-4d23-B9F7-39BE00100776}” = Toolbox

“{11B83AD3-7A46-4C2E-A568-9505981D4C6F}” = HP Update

“{17342E3B-0818-4A6F-BFF8-99476605ADD6}” = livebox tp

“{18669FF9-C8FE-407a-9F70-E674896B1DB4}” = GPBaseService

“{2614F54E-A828-49FA-93BA-45A3F756BFAA}” = 32 Bit HP CIO Components Installer

“{26A24AE4-039D-4CA4-87B4-2F83216013FF}” = Java 6 Update 15

“{287ECFA4-719A-2143-A09B-D6A12DE54E40}” = Acrobat.com

“{34BFB099-07B2-4E95-A673-7362D60866A2}” = PSSWCORE

“{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}” = WebFldrs XP

“{36FDBE6E-6684-462b-AE98-9A39A1B200CC}” = HPProductAssistant

“{4DBF3C3D-5B6D-45B2-A08B-B06490E2666F}_is1” = Wru! 1.1.3

“{4DFF1415-4C29-44A8-BFD4-2BCE249C4991}” = SpPhones

“{5109C064-813E-4e87-B0DE-C8AF7B5BC02B}” = SmartWebPrintingOC

“{52A69E11-7CEB-4a7d-9607-68BA4F39A89B}” = DeviceDiscovery

“{560F47F7-EB23-44B1-AAFC-667F1CD8FE5C}” = Sp5

“{56C049BE-79E9-4502-BEA7-9754A3E60F9B}” = neroxml

“{5ACE69F0-A3E8-44eb-88C1-0A841E700180}” = TrayApp

“{62FDEF90-E629-450A-BCD1-4B293ECF4E4C}” = Counter - Strike 1.6

“{651A56B6-70F4-4C83-9A98-039864E8C216}” = Bluesoleil 6.4.245.0

“{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}” = eSupportQFolder

“{66EBD70F-A42C-475F-AEDF-277378151045}” = Nero 7 Essentials

“{687FEF8A-8597-40b4-832C-297EA3F35817}” = BufferChm

“{6956856F-B6B3-4BE0-BA0B-8F495BE32033}” = Apple Software Update

“{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}” = Windows Media Player Firefox Plugin

“{6C3959C6-943E-44B3-BAAD-570B04B134E5}” = SpCommon

“{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}” = CustomerResearchQFolder

“{789289CA-F73A-4A16-A331-54D498CE069F}” = Ventrilo

“{80533B67-C407-485D-8B5D-63BB8ED9D878}” = Scan

“{83258E90-1F76-4E13-9F60-A0F8ED41E76F}” = PC Connectivity Solution

“{837b34e3-7c30-493c-8f6a-2b0f04e2912c}” = Microsoft Visual C++ 2005 Redistributable

“{886C92E6-4AF1-4290-BB86-4B5064A1BB7D}” = AMD Dual-Core Optimizer

“{8A85DEAD-7C1F-4368-881C-72AC74CB2E91}” = UnloadSupport

“{9A25302D-30C0-39D9-BD6F-21E6EC160475}” = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

“{9ABFB92D-93DA-49EE-8ABF-F8195DE45CA9}” = Counter-Strike 1.6

“{A0B9F8DF-C949-45ed-9808-7DC5C0C19C81}” = Status

“{A2BCA9F1-566C-4805-97D1-7FDC93386723}” = Adobe AIR

“{A306FD29-7D3A-4287-91AC-9A0180931395}_is1” = Roadkil’s Unstoppable Copier Version 4.2

“{A45F4518-0DC7-474A-BBE1-F04CC2D6FD93}” = EasyRecovery Professional Trial

“{A49F249F-0C91-497F-86DF-B2585E8E76B7}” = Microsoft Visual C++ 2005 Redistributable

“{A5AB9D5E-52E2-440e-A3ED-9512E253C81A}” = SolutionCenter

“{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}” = Google Update Helper

“{AB5D51AE-EBC3-438D-872C-705C7C2084B0}” = DeviceManagementQFolder

“{AC76BA86-7AD7-1033-7B44-A91000000001}” = Adobe Reader 9.1.1

“{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}” = REALTEK GbE & FE Ethernet PCI NIC Driver

“{B8DBED1E-8BC3-4d08-B94A-F9D7D88E9BBF}” = HPSSupply

“{BAD0FA60-09CF-4411-AE6A-C2844C8812FA}” = HP Photosmart Essential 2.5

“{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}” = Need for Speed™ SHIFT

“{C3F19A5F-35A8-4FDB-A6ED-0F4CE398DA48}” = Nokia Connectivity Cable Driver

“{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}” = NVIDIA PhysX

“{c6922d7f-c698-4d9e-9671-8b3de04d1511}” = DJ_AIO_03_F2200_Software_Min

“{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}” = Microsoft .NET Framework 1.1

“{CC419DDC-E0F0-4013-B25A-6FA036516F0D}” = Need for Speed™ ProStreet

“{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}” = PlayReady PC Runtime x86

“{CCB9B81A-167F-4832-B305-D2A0430840B3}” = WebReg

“{D2E0F0CC-6BE0-490b-B08B-9267083E34C9}” = MarketResearch

“{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}” = Nikon Message Center

“{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}” = GTA San Andreas

“{D45E8C45-B601-4A80-AFD8-E16338744DE1}” = ArcSoft Panorama Maker 4

“{D77D43B5-ED55-426b-B67B-E21F804F6102}” = HP Deskjet F2200 All-In-One Driver Software 10.0 Rel .3

“{D99A8E3A-AE5A-4692-8B19-6F16D454E240}” = Destination Component

“{db18dc72-cd20-4801-be82-f5d2caeec4d7}” = DJ_AIO_03_F2200_Software

“{E08DC77E-D09A-4e36-8067-D6DBBCC5F8DC}” = VideoToolkit01

“{E415C943-37E5-473F-8BAE-043C56734124}” = Sp5TTInt

“{eca3039b-e429-420f-bd5e-7dec0683fc32}” = DJ_AIO_03_F2200_ProductContext

“{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}” = Realtek High Definition Audio Driver

“{F42CD69D-E393-47c8-B2CD-B139C4ADA9A8}” = Copy

“{FD4B33E1-24AE-4535-AA7B-162B30FB57CD}” = Sp5Intl

“504244733D18C8F63FF584AEB290E3904E791693” = Pakiet sterowników systemu Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)

“6194C28A8F62DD817EA1B918E6E46E806A21B452” = Pakiet sterowników systemu Windows - MobileTop (sshpmdm) Modem (02/23/2007 2.5.0.0)

“65B6FE5418CE28F4D72543FB2D964C3CEC83F161” = Pakiet sterowników systemu Windows - MobileTop (sshpusb) USB (02/23/2007 2.5.0.0)

“Adobe Acrobat 5.0” = Adobe Acrobat 5.0

“Adobe Flash Player ActiveX” = Adobe Flash Player 10 ActiveX

“Adobe Flash Player Plugin” = Adobe Flash Player 10 Plugin

“Adobe Shockwave Player” = Adobe Shockwave Player 11.5

“ALLPlayer_is1” = ALLPlayer V4.X

“ALUpdate_is1” = ALTools Update

“ALZip_is1” = ALZip

“Aqsis” = Aqsis Renderer 1.2.0

“CCleaner” = CCleaner (remove only)

“Counter-Strike 1.6” = Counter-Strike 1.6

“DAEMON Tools Toolbar” = DAEMON Tools Toolbar

“eMusic Promotion” = 50 FREE MP3s +1 Free Audiobook!

“Gadu-Gadu” = Gadu-Gadu 7.7

“Gadu-Gadu 10” = Gadu-Gadu 10

“GameDesire-Pool & Snooker” = GameDesire-Pool & Snooker

“Hamachi” = Hamachi 1.0.3.0

“HijackThis” = HijackThis 2.0.2

“HP Imaging Device Functions” = HP Imaging Device Functions 10.0

“HP Photosmart Essential” = HP Photosmart Essential 2.5

“HP Smart Web Printing” = HP Smart Web Printing

“HP Solution Center & Imaging Support Tools” = HP Solution Center 10.0

“HPExtendedCapabilities” = HP Customer Participation Program 10.0

“InstallShield_{A45F4518-0DC7-474A-BBE1-F04CC2D6FD93}” = EasyRecovery Professional Trial

“ipla” = ipla 2.1.1

“KLiteCodecPack_is1” = K-Lite Codec Pack 4.9.0 (Full)

“LastFM_is1” = Last.fm 1.5.4.24567

“Livebox Reconnect 2.0 Pro” = Livebox Reconnect 2.0 Pro

“Microsoft .NET Framework 1.1 (1033)” = Microsoft .NET Framework 1.1

“Mozilla Firefox (3.5.6)” = Mozilla Firefox (3.5.6)

“MSCompPackV1” = Microsoft Compression Client Pack 1.0 for Windows XP

“NAPIPROJEKT_is1” = NAPIPROJEKT 1.0.6.2

“NokiaFREE Unlock Codes Calculator” = NokiaFREE Unlock Codes Calculator

“NVIDIA Drivers” = NVIDIA Drivers

“NVIDIA nView Desktop Manager” = NVIDIA nView Desktop Manager

“Pankaj Arora Software’s Tumi Cursor PowerPack” = Pankaj Arora Software’s Tumi Cursor PowerPack (Remove)

“PhotoToolkit_is1” = Photo! Editor 1.1

“RealPlayer 6.0” = RealPlayer

“Shop for HP Supplies” = Shop for HP Supplies

“ST6UNST #1” = HLTooLz

“SystemRequirementsLab” = System Requirements Lab

“Testy B 2007_is1” = Testy B 2007

“Virtual DJ - Atomix Productions” = Virtual DJ - Atomix Productions

“Winamp” = Winamp

“Winamp Toolbar” = Winamp Toolbar

“Windows Media Format Runtime” = Windows Media Format 11 runtime

“Windows Media Player” = Windows Media Player 11

“Windows XP Service Pack” = Windows XP Service Pack 3

“WinGimp-2.0_is1” = GIMP 2.6.6

“WinGTK-2_is1” = GTK+ 2.6.10-20050823 runtime environment

“WinRAR archiver” = Archiwizator WinRAR

“WMFDist11” = Windows Media Format 11 runtime

“wmp11” = Windows Media Player 11

“Wolfenstein - Enemy Territory” = Wolfenstein - Enemy Territory

“Wudf01000” = Microsoft User-Mode Driver Framework Feature Pack 1.0

“Xfire” = Xfire (remove only)

“Yahoo! Companion” = Yahoo! Companion

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

“Google Chrome” = Google Chrome

“Power Loader” = Power Challenge Game Plugin

“uTorrent” = µTorrent

========== Last 10 Event Log Errors ==========

[Application Events]

Error - 2009-12-25 09:57:35 | Computer Name = A-0C891D7FD45D4 | Source = Userenv | ID = 1041

Description = System Windows nie może wykonać kwerendy wpisu rejestru DllName dla

aplikacji {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}, która nie zostanie załadowana.

Prawdopodobną przyczyną jest błąd rejestracji.

Error - 2009-12-25 10:15:35 | Computer Name = A-0C891D7FD45D4 | Source = Userenv | ID = 1041

Description = System Windows nie może wykonać kwerendy wpisu rejestru DllName dla

aplikacji {7B849a69-220F-451E-B3FE-2CB811AF94AE}, która nie zostanie załadowana.

Prawdopodobną przyczyną jest błąd rejestracji.

Error - 2009-12-25 10:15:35 | Computer Name = A-0C891D7FD45D4 | Source = Userenv | ID = 1041

Description = System Windows nie może wykonać kwerendy wpisu rejestru DllName dla

aplikacji {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}, która nie zostanie załadowana.

Prawdopodobną przyczyną jest błąd rejestracji.

Error - 2009-12-25 11:53:35 | Computer Name = A-0C891D7FD45D4 | Source = Userenv | ID = 1041

Description = System Windows nie może wykonać kwerendy wpisu rejestru DllName dla

aplikacji {7B849a69-220F-451E-B3FE-2CB811AF94AE}, która nie zostanie załadowana.

Prawdopodobną przyczyną jest błąd rejestracji.

Error - 2009-12-25 11:53:35 | Computer Name = A-0C891D7FD45D4 | Source = Userenv | ID = 1041

Description = System Windows nie może wykonać kwerendy wpisu rejestru DllName dla

aplikacji {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}, która nie zostanie załadowana.

Prawdopodobną przyczyną jest błąd rejestracji.

Error - 2009-12-25 12:14:35 | Computer Name = A-0C891D7FD45D4 | Source = Userenv | ID = 1041

Description = System Windows nie może wykonać kwerendy wpisu rejestru DllName dla

aplikacji {7B849a69-220F-451E-B3FE-2CB811AF94AE}, która nie zostanie załadowana.

Prawdopodobną przyczyną jest błąd rejestracji.

Error - 2009-12-25 12:14:35 | Computer Name = A-0C891D7FD45D4 | Source = Userenv | ID = 1041

Description = System Windows nie może wykonać kwerendy wpisu rejestru DllName dla

aplikacji {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}, która nie zostanie załadowana.

Prawdopodobną przyczyną jest błąd rejestracji.

Error - 2009-12-25 13:44:35 | Computer Name = A-0C891D7FD45D4 | Source = Userenv | ID = 1041

Description = System Windows nie może wykonać kwerendy wpisu rejestru DllName dla

aplikacji {7B849a69-220F-451E-B3FE-2CB811AF94AE}, która nie zostanie załadowana.

Prawdopodobną przyczyną jest błąd rejestracji.

Error - 2009-12-25 13:44:35 | Computer Name = A-0C891D7FD45D4 | Source = Userenv | ID = 1041

Description = System Windows nie może wykonać kwerendy wpisu rejestru DllName dla

aplikacji {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}, która nie zostanie załadowana.

Prawdopodobną przyczyną jest błąd rejestracji.

Error - 2009-12-25 13:51:35 | Computer Name = A-0C891D7FD45D4 | Source = Userenv | ID = 1041

Description = System Windows nie może wykonać kwerendy wpisu rejestru DllName dla

aplikacji {7B849a69-220F-451E-B3FE-2CB811AF94AE}, która nie zostanie załadowana.

Prawdopodobną przyczyną jest błąd rejestracji.

[System Events]

Error - 2009-12-24 23:27:26 | Computer Name = A-0C891D7FD45D4 | Source = AmdTools | ID = 180092939

Description = AdjustCoreTSC() Node[0] Core[0] Cpu[0] Affinity[0x1] Error:

HalGetBusDataByOffset() failed reading north-bridge TSC.

Error - 2009-12-24 23:27:26 | Computer Name = A-0C891D7FD45D4 | Source = AmdTools | ID = 180092939

Description = AdjustCoreTSC() Node[0] Core[1] Cpu[1] Affinity[0x2] Error:

HalGetBusDataByOffset() failed reading north-bridge TSC.

Error - 2009-12-24 23:28:55 | Computer Name = A-0C891D7FD45D4 | Source = Service Control Manager | ID = 7000

Description = Nie można uruchomić usługi ASKUpgrade z powodu następującego błędu:

%%2

Error - 2009-12-24 23:28:55 | Computer Name = A-0C891D7FD45D4 | Source = Service Control Manager | ID = 7000

Description = Nie można uruchomić usługi CLCV0 z powodu następującego błędu: %%193

Error - 2009-12-24 23:29:20 | Computer Name = A-0C891D7FD45D4 | Source = Service Control Manager | ID = 7022

Description = Usługa Usługa HP CUE DeviceDiscovery zawiesiła się podczas uruchamiania.

Error - 2009-12-25 06:27:32 | Computer Name = A-0C891D7FD45D4 | Source = AmdTools | ID = 180092939

Description = AdjustCoreTSC() Node[0] Core[0] Cpu[0] Affinity[0x1] Error:

HalGetBusDataByOffset() failed reading north-bridge TSC.

Error - 2009-12-25 06:27:32 | Computer Name = A-0C891D7FD45D4 | Source = AmdTools | ID = 180092939

Description = AdjustCoreTSC() Node[0] Core[1] Cpu[1] Affinity[0x2] Error:

HalGetBusDataByOffset() failed reading north-bridge TSC.

Error - 2009-12-25 06:29:06 | Computer Name = A-0C891D7FD45D4 | Source = Service Control Manager | ID = 7000

Description = Nie można uruchomić usługi ASKUpgrade z powodu następującego błędu:

%%2

Error - 2009-12-25 06:29:06 | Computer Name = A-0C891D7FD45D4 | Source = Service Control Manager | ID = 7000

Description = Nie można uruchomić usługi CLCV0 z powodu następującego błędu: %%193

Error - 2009-12-25 06:29:27 | Computer Name = A-0C891D7FD45D4 | Source = Service Control Manager | ID = 7022

Description = Usługa Usługa HP CUE DeviceDiscovery zawiesiła się podczas uruchamiania.

< End of report >

#6

Plik OTL.txt i zobacz - Zmiana zasad wklejania logów na forum - viewtopic.php?f=16&t=253052

#7

otl.txt sie nie miesci bo ma za duzo znakow

#8

Czytasz co ja napisałem i czy widziałeś linka - zasady-wklejania-logow-forum-tytulowania-tematow-t253052.html

#9

http://wklejto.pl/51409 to masz mojego loga z OTL.Txt

– Dodane 25.12.2009 (Pt) 20:27 –

plz odpowiedz

#10

Uruchom OTL i w oknie Custom Scans/Fixes wklej to:

Kliknij w Run Fix. Zatwierdź restart komputera.

Następnie uruchom OTL ponownie, tym razem wywołaj opcję Run Scan.

Pokaż nowy log OTL.txt oraz log z czyszczenia.

Wykonaj pełny skan Dr. Web CureIt