Problem z qooqle:]

Portowiec · 18 Marzec 2011 13:57

Witam,mam problem z qooqle,mianowicie ciagle ustawiaja sie same na strone startowa w przegladarce i nie idzie ich usunac :S Prosze o pomoc. Pozdrawiam Serdecznie.

mkulak0 · 18 Marzec 2011 16:16

Podaj przynajmniej jaką masz przeglądarkę…

Portowiec · 18 Marzec 2011 18:36

sorki :oops: Uzywam Mozilli

errata72 · 18 Marzec 2011 19:40

Powiem najprościej.Uruchom Firefoxa następnie jeśli jest niechciana strona startowa to zamknij jej kartę

czerwonym X,następnie wpisz w pasek adresu to co chcesz jako stronę startową i otwórz ją. Następnie wejdź w menu Narzędzia >Opcje >Ogólne i zaznacz :wyświetl stronę startową, następnie zaznacz : Użyj bieżących stron

i OK

Zrób restart Firefoxa [wyłącz i włącz] i pisz jak jest.

Portowiec · 18 Marzec 2011 21:16

Problem znow sie powtarza po wylaczeniu i wlaczeniu kompa

– Dodane 18.03.2011 (Pt) 22:38 –

Patrzylem na innych forach w jaki sposob rozwiazuja takowy problem,sciagnelem program otl i mam logi.

OTL logfile created on: 2011-03-18 22:20:10 - Run 1

OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\AnteK\Moje dokumenty\Pobieranie

Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 6.0.2900.2180)

Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd


446,00 Mb Total Physical Memory | 91,00 Mb Available Physical Memory | 20,00% Memory free

1,00 Gb Paging File | 1,00 Gb Available in Paging File | 65,00% Paging File free

Paging file location(s): C:\pagefile.sys 768 1536 [binary data]


%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 98,45 Gb Total Space | 79,13 Gb Free Space | 80,37% Space Free | Partition Type: NTFS

Drive D: | 29,54 Gb Total Space | 12,22 Gb Free Space | 41,37% Space Free | Partition Type: NTFS


Computer Name: ADMIN-7021EFE8F | User Name: AnteK | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days


[color=#E56717]========== Processes (SafeList) ==========[/color]


PRC - [2011-03-18 22:19:27 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\AnteK\Moje dokumenty\Pobieranie\OTL_3.2.22.3(dobreprogramy.pl).exe

PRC - [2011-03-06 15:22:19 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe

PRC - [2011-03-05 22:29:28 | 000,396,152 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe

PRC - [2010-12-20 12:41:52 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe

PRC - [2010-12-20 12:41:51 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

PRC - [2010-12-20 12:41:51 | 000,267,944 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe

PRC - [2010-12-16 06:19:28 | 012,984,928 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe

PRC - [2010-11-04 00:00:00 | 000,138,632 | ---- | M] (WinAbility® Software Corporation) -- C:\Program Files\Folder Guard\FGKey.exe

PRC - [2010-01-14 22:11:00 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

PRC - [2006-11-17 05:42:52 | 000,577,536 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE

PRC - [2005-11-01 04:15:12 | 000,163,840 | ---- | M] (S3 Graphics Co., Ltd.) -- C:\WINDOWS\system32\VTTrayp.exe

PRC - [2005-03-08 03:33:28 | 000,053,248 | ---- | M] (S3 Graphics, Inc.) -- C:\WINDOWS\system32\VTTimer.exe

PRC - [2004-08-03 23:44:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe



[color=#E56717]========== Modules (SafeList) ==========[/color]


MOD - [2011-03-18 22:19:27 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\AnteK\Moje dokumenty\Pobieranie\OTL_3.2.22.3(dobreprogramy.pl).exe

MOD - [2010-11-04 00:00:00 | 000,114,056 | ---- | M] (WinAbility® Software Corporation) -- C:\Program Files\Folder Guard\FGH32.dll

MOD - [2004-08-03 23:44:16 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\winsta.dll

MOD - [2004-08-03 23:44:16 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wtsapi32.dll

MOD - [2004-08-03 23:42:34 | 001,050,624 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll



[color=#E56717]========== Win32 Services (SafeList) ==========[/color]


SRV - File not found [Disabled | Stopped] -- -- (HidServ)

SRV - [2010-12-20 12:41:52 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)

SRV - [2010-12-20 12:41:51 | 000,267,944 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)



[color=#E56717]========== Driver Services (SafeList) ==========[/color]


DRV - [2010-12-22 11:13:18 | 000,042,016 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\Xprotector.sys -- (XPROTECTOR)

DRV - [2010-12-20 12:41:52 | 000,135,096 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)

DRV - [2010-12-20 12:41:52 | 000,061,960 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)

DRV - [2010-11-04 00:00:00 | 000,056,976 | ---- | M] (WinAbility® Software Corporation) [Kernel | Auto | Running] -- C:\Program Files\Folder Guard\FGUARD32.sys -- (FGUARD32)

DRV - [2009-05-11 12:49:19 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)

DRV - [2009-05-11 10:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)

DRV - [2007-03-08 14:34:46 | 004,027,840 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)

DRV - [2006-10-17 20:22:26 | 000,009,216 | R--- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\videX32.sys -- (videX32)

DRV - [2004-08-03 23:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C)



[color=#E56717]========== Standard Registry (SafeList) ==========[/color]



[color=#E56717]========== Internet Explorer ==========[/color]


IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qooqlle.com/

IE - HKCU\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


[color=#E56717]========== FireFox ==========[/color]


FF - prefs.js..browser.search.selectedEngine: "qooqlle"

FF - prefs.js..browser.search.useDBForOrder: true

FF - prefs.js..browser.startup.homepage: "http://www.qooqlle.com/"

FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0

FF - prefs.js..extensions.enabledItems: {888d99e7-e8b5-46a3-851e-1ec45da1e644}:4.0.0

FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2

FF - prefs.js..extensions.enabledItems: cssreloader@kenneth.io:1.0.2

FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20100408.6

FF - prefs.js..network.proxy.backup.ftp: "127.0.0.1"

FF - prefs.js..network.proxy.backup.ftp_port: 9666

FF - prefs.js..network.proxy.backup.gopher: "127.0.0.1"

FF - prefs.js..network.proxy.backup.gopher_port: 9666

FF - prefs.js..network.proxy.backup.socks: "127.0.0.1"

FF - prefs.js..network.proxy.backup.socks_port: 9666

FF - prefs.js..network.proxy.backup.ssl: "127.0.0.1"

FF - prefs.js..network.proxy.backup.ssl_port: 9666

FF - prefs.js..network.proxy.ftp: "127.0.0.1"

FF - prefs.js..network.proxy.ftp_port: 9666

FF - prefs.js..network.proxy.gopher: "127.0.0.1"

FF - prefs.js..network.proxy.gopher_port: 9666

FF - prefs.js..network.proxy.http: "127.0.0.1"

FF - prefs.js..network.proxy.http_port: 9666

FF - prefs.js..network.proxy.share_proxy_settings: true

FF - prefs.js..network.proxy.socks: "127.0.0.1"

FF - prefs.js..network.proxy.socks_port: 9666

FF - prefs.js..network.proxy.ssl: "127.0.0.1"

FF - prefs.js..network.proxy.ssl_port: 9666

FF - prefs.js..network.proxy.type: 0



FF - HKLM\software\mozilla\Mozilla Firefox 3.6.15\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-03-06 21:58:04 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.15\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-03-06 15:22:33 | 000,000,000 | ---D | M]


[2010-12-20 15:33:28 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Extensions

[2011-03-18 22:11:02 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Firefox\Profiles\n4smg1jc.default\extensions

[2011-01-15 16:43:38 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Firefox\Profiles\n4smg1jc.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}

[2011-03-05 22:29:47 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Firefox\Profiles\n4smg1jc.default\extensions\engine@conduit.com

[2011-03-06 15:22:41 | 000,000,000 | ---D | M] (vShare) -- C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Firefox\Profiles\n4smg1jc.default\extensions\vshare@toolbar

[2011-03-18 22:10:12 | 000,001,860 | ---- | M] () -- C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Firefox\Profiles\n4smg1jc.default\searchplugins\search.xml

[2011-03-06 15:23:19 | 000,001,583 | ---- | M] () -- C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Firefox\Profiles\n4smg1jc.default\searchplugins\web-search.xml

[2011-03-18 19:45:36 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions

[2011-02-03 21:12:08 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

[2011-03-06 10:42:29 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}

[2011-02-03 21:11:23 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF

[2011-02-02 21:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll

[2011-03-06 15:22:25 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml

[2011-03-06 15:22:25 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml

[2011-03-06 15:22:26 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml

[2011-03-06 15:22:26 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml

[2011-03-06 15:22:26 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml

[2011-03-06 15:22:26 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml


O1 HOSTS File: ([2001-10-26 17:45:16 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)

O2 - BHO: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)

O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)

O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)

O3 - HKCU\..\Toolbar\WebBrowser: (uTorrentBar Toolbar) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)

O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)

O4 - HKLM..\Run: [FG_Monitor] C:\Program Files\Folder Guard\FGKey.exe (WinAbility® Software Corporation)

O4 - HKLM..\Run: [Readar_sl] C:\Documents and Settings\AnteK\Dane aplikacji\Readar_sl.exe (Created with WinAutomation (http://www.WinAutomation.com))

O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)

O4 - HKLM..\Run: [TunesHelper] C:\Documents and Settings\All Users\TunesHelper.exe ()

O4 - HKLM..\Run: [VTTimer] C:\WINDOWS\System32\VTTimer.exe (S3 Graphics, Inc.)

O4 - HKLM..\Run: [VTTrayp] C:\WINDOWS\System32\VTTrayp.exe (S3 Graphics Co., Ltd.)

O4 - HKCU..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe ()

O4 - HKCU..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.)

O4 - HKCU..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery present

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)

O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.63 62.179.1.62

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home

O24 - Desktop WallPaper: C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp

O24 - Desktop BackupWallPaper: C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2010-12-20 10:21:36 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [NTFS]

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*


[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]


[2011-03-18 15:11:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\.gstreamer-0.10

[2011-03-18 14:18:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt

[2011-03-18 14:17:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\Dane aplikacji\ipla

[2011-03-12 22:36:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\Menu Start\Programy\Theorica Divx ;-) Codecs

[2011-03-12 22:36:41 | 000,000,000 | ---D | C] -- C:\Program Files\Theorica Divx ;-) Codecs

[2011-03-12 22:36:36 | 000,311,296 | RHS- | C] (Created with WinAutomation (http://www.WinAutomation.com)) -- C:\Documents and Settings\AnteK\Dane aplikacji\Readar_sl.exe

[2011-03-06 13:41:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\Folder Guard

[2011-03-06 13:40:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Folder Guard

[2011-03-06 13:40:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Folder Guard

[2011-03-06 13:40:11 | 000,000,000 | ---D | C] -- C:\Program Files\Folder Guard

[2011-03-06 10:45:01 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java

[2011-03-06 10:42:26 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe

[2011-03-06 10:42:26 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe

[2011-03-06 10:42:26 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe

[2011-03-06 10:41:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\McAfee

[2011-03-05 23:22:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\ALLPlayer

[2011-03-05 23:22:07 | 000,000,000 | ---D | C] -- C:\Program Files\NAPI-PROJEKT

[2011-03-05 23:21:40 | 000,000,000 | ---D | C] -- C:\Program Files\ALLPlayer

[2011-03-05 22:32:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\Moje dokumenty\Downloads

[2011-03-05 22:30:03 | 000,000,000 | ---D | C] -- C:\Program Files\Conduit

[2011-03-05 22:30:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\Conduit

[2011-03-05 22:30:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\uTorrentBar

[2011-03-05 22:29:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\ConduitEngine

[2011-03-05 22:29:56 | 000,000,000 | ---D | C] -- C:\Program Files\ConduitEngine

[2011-03-05 22:29:49 | 000,000,000 | ---D | C] -- C:\Program Files\uTorrentBar

[2011-03-05 22:29:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\Temp

[2011-03-05 22:29:28 | 000,000,000 | ---D | C] -- C:\Program Files\uTorrent

[2011-03-05 22:28:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\Dane aplikacji\uTorrent

[2011-03-03 09:20:50 | 000,000,000 | --SD | C] -- C:\Documents and Settings\AnteK\UserData

[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp ->]

[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp ->]


[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]


[2011-03-18 22:14:00 | 000,001,164 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-1060284298-839522115-500UA.job

[2011-03-18 22:04:57 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2011-03-18 22:04:56 | 468,242,432 | -HS- | M] () -- C:\hiberfil.sys

[2011-03-18 14:26:01 | 000,016,896 | ---- | M] () -- C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011-03-18 14:14:00 | 000,001,112 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-1060284298-839522115-500Core.job

[2011-03-17 09:22:25 | 000,935,566 | ---- | M] () -- C:\Documents and Settings\AnteK\Pulpit\indeks.jpeg

[2011-03-16 16:10:42 | 000,363,511 | ---- | M] () -- C:\Documents and Settings\AnteK\Pulpit\2w6ut0l.jpg

[2011-03-12 22:36:33 | 008,180,224 | RHS- | M] () -- C:\Documents and Settings\All Users\TunesHelper.exe

[2011-03-12 22:36:33 | 000,311,296 | RHS- | M] (Created with WinAutomation (http://www.WinAutomation.com)) -- C:\Documents and Settings\AnteK\Dane aplikacji\Readar_sl.exe

[2011-03-12 08:49:12 | 004,007,842 | ---- | M] () -- C:\Documents and Settings\AnteK\Pulpit\sprzymierzeni-wielka polsko.mp3

[2011-03-12 08:48:01 | 004,281,187 | ---- | M] () -- C:\Documents and Settings\AnteK\Pulpit\sprzymierzeni-ta dzielnica.mp3

[2011-03-12 08:47:56 | 003,520,502 | ---- | M] () -- C:\Documents and Settings\AnteK\Pulpit\sprzymierzeni-interwencje policyjne.mp3

[2011-03-12 08:26:20 | 003,115,081 | ---- | M] () -- C:\Documents and Settings\AnteK\Pulpit\sexualna.mp3

[2011-03-05 23:22:12 | 000,000,694 | ---- | M] () -- C:\Documents and Settings\AnteK\Pulpit\ALLPlayer V4.6.lnk

[2011-03-03 08:32:36 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp ->]

[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp ->]


[color=#E56717]========== Files Created - No Company Name ==========[/color]


[2011-03-16 16:13:52 | 000,935,566 | ---- | C] () -- C:\Documents and Settings\AnteK\Pulpit\indeks.jpeg

[2011-03-16 16:10:41 | 000,363,511 | ---- | C] () -- C:\Documents and Settings\AnteK\Pulpit\2w6ut0l.jpg

[2011-03-12 22:36:36 | 008,180,224 | RHS- | C] () -- C:\Documents and Settings\All Users\TunesHelper.exe

[2011-03-12 08:45:53 | 004,007,842 | ---- | C] () -- C:\Documents and Settings\AnteK\Pulpit\sprzymierzeni-wielka polsko.mp3

[2011-03-12 08:45:01 | 003,520,502 | ---- | C] () -- C:\Documents and Settings\AnteK\Pulpit\sprzymierzeni-interwencje policyjne.mp3

[2011-03-12 08:44:32 | 004,281,187 | ---- | C] () -- C:\Documents and Settings\AnteK\Pulpit\sprzymierzeni-ta dzielnica.mp3

[2011-03-12 08:23:47 | 003,115,081 | ---- | C] () -- C:\Documents and Settings\AnteK\Pulpit\sexualna.mp3

[2011-03-05 23:22:12 | 000,000,694 | ---- | C] () -- C:\Documents and Settings\AnteK\Pulpit\ALLPlayer V4.6.lnk

[2011-03-05 23:21:57 | 000,797,184 | ---- | C] () -- C:\WINDOWS\System32\ac3filter.ax

[2011-03-05 23:21:57 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll

[2011-02-09 20:27:19 | 000,016,896 | ---- | C] () -- C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2010-12-25 00:23:45 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI

[2010-12-22 11:13:18 | 000,042,016 | ---- | C] () -- C:\WINDOWS\System32\drivers\Xprotector.sys

[2010-12-20 15:22:09 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat

[2010-12-20 14:52:39 | 000,000,003 | ---- | C] () -- C:\WINDOWS\treeskp.sys

[2010-12-20 14:52:39 | 000,000,003 | ---- | C] () -- C:\WINDOWS\sbacknt.bin

[2010-12-20 12:05:26 | 000,147,456 | R--- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll

[2010-12-20 11:09:00 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI

[2010-12-20 11:07:53 | 000,093,480 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2010-12-20 10:24:21 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat

[2010-12-20 10:18:14 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat

[2006-08-23 10:33:46 | 000,006,144 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll

[2006-02-25 12:12:34 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll

[2006-02-25 12:09:38 | 000,774,144 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll

[2004-08-03 23:56:48 | 000,001,788 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin

[2004-08-03 23:44:00 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll

[2004-08-02 13:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat

[2004-07-17 10:36:38 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys

[2002-11-18 17:02:58 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\MMAVILNG.exe

[2002-11-15 14:11:28 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\MMSwitch.dll

[2002-10-06 20:42:58 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll

[2002-10-05 01:04:26 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll

[2002-10-05 01:04:26 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\VORBIS.DLL

[2002-10-05 01:04:18 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\OGG.DLL

[2001-10-26 18:15:16 | 000,355,486 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat

[2001-10-26 18:15:16 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat

[2001-10-26 18:15:16 | 000,049,492 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat

[2001-10-26 18:15:16 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat

[2001-08-23 15:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin

[2001-08-23 15:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat

[2001-08-17 23:30:24 | 000,311,604 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat

[2001-08-17 23:30:24 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat

[2001-08-17 23:30:24 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat

[2001-08-17 23:30:22 | 000,039,992 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat

[2001-08-17 23:15:38 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin

[2001-07-22 00:36:48 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat

[2001-07-22 00:36:04 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat

[2001-07-22 00:24:16 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat


< End of report >

Prosze o dalsze porady . :?

djkamil09061991 · 18 Marzec 2011 22:01

Wklej w OTL i naciśnij wykonaj skrypt:

:OTL IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qooqlle.com/ IE - HKCU…\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.) FF - prefs.js…browser.search.selectedEngine: “qooqlle” FF - prefs.js…browser.startup.homepage: “http://www.qooqlle.com/” [2011-03-06 15:22:41 | 000,000,000 | —D | M] (vShare) – C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Firefox\Profiles\n4smg1jc.default\extensions\vshare@toolbar O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O4 - HKLM…\Run: [Readar_sl] C:\Documents and Settings\AnteK\Dane aplikacji\Readar_sl.exe (Created with WinAutomation (http://www.WinAutomation.com)) O4 - HKLM…\Run: [TunesHelper] C:\Documents and Settings\All Users\TunesHelper.exe () O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) [2011-03-12 22:36:36 | 000,311,296 | RHS- | C] (Created with WinAutomation (http://www.WinAutomation.com)) – C:\Documents and Settings\AnteK\Dane aplikacji\Readar_sl.exe [2011-03-12 22:36:33 | 008,180,224 | RHS- | M] () – C:\Documents and Settings\All Users\TunesHelper.exe [2011-03-12 22:36:33 | 000,311,296 | RHS- | M] (Created with WinAutomation (http://www.WinAutomation.com)) – C:\Documents and Settings\AnteK\Dane aplikacji\Readar_sl.exe :Commands [emptytemp]

dajesz log z usuwania i nowy log z OTL

Portowiec · 18 Marzec 2011 22:22

Usuwanie:

All processes killed

========== OTL ==========

HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!

Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\ deleted successfully.

C:\Program Files\uTorrentBar\tbuTor.dll moved successfully.

Prefs.js: "qooqlle" removed from browser.search.selectedEngine

Prefs.js: "http://www.qooqlle.com/" removed from browser.startup.homepage

C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Firefox\Profiles\n4smg1jc.default\extensions\vshare@toolbar\modules folder moved successfully.

C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Firefox\Profiles\n4smg1jc.default\extensions\vshare@toolbar\locale\en-US folder moved successfully.

C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Firefox\Profiles\n4smg1jc.default\extensions\vshare@toolbar\locale folder moved successfully.

C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Firefox\Profiles\n4smg1jc.default\extensions\vshare@toolbar\components folder moved successfully.

C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Firefox\Profiles\n4smg1jc.default\extensions\vshare@toolbar\chrome folder moved successfully.

C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Firefox\Profiles\n4smg1jc.default\extensions\vshare@toolbar folder moved successfully.

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}\ deleted successfully.

C:\Program Files\ConduitEngine\ConduitEngine.dll moved successfully.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{30F9B915-B755-4826-820B-08FBA6BD249D} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}\ not found.

File C:\Program Files\ConduitEngine\ConduitEngine.dll not found.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Readar_sl deleted successfully.

C:\Documents and Settings\AnteK\Dane aplikacji\Readar_sl.exe moved successfully.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\TunesHelper deleted successfully.

C:\Documents and Settings\All Users\TunesHelper.exe moved successfully.

Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7}

C:\WINDOWS\Downloaded Program Files\gp.inf not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.

File C:\Documents and Settings\AnteK\Dane aplikacji\Readar_sl.exe not found.

File C:\Documents and Settings\All Users\TunesHelper.exe not found.

File C:\Documents and Settings\AnteK\Dane aplikacji\Readar_sl.exe not found.

========== COMMANDS ==========


[EMPTYTEMP]


User: Administrator


User: All Users


User: AnteK

->Temp folder emptied: 47470927 bytes

->Temporary Internet Files folder emptied: 7474752 bytes

->Java cache emptied: 26062 bytes

->FireFox cache emptied: 93654973 bytes

->Flash cache emptied: 14963 bytes


User: Daro

->Temp folder emptied: 1388438 bytes

->Temporary Internet Files folder emptied: 15898920 bytes

->Java cache emptied: 0 bytes

->FireFox cache emptied: 114655470 bytes

->Flash cache emptied: 6247 bytes


User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33170 bytes


User: LocalService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33170 bytes


User: NetworkService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 402 bytes


%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 2114584 bytes

%systemroot%\System32 .tmp files removed: 2596 bytes

%systemroot%\System32\dllcache .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 82944 bytes

RecycleBin emptied: 0 bytes


Total Files Cleaned = 270,00 mb



OTL by OldTimer - Version 3.2.22.3 log created on 03182011_230809


Files\Folders moved on Reboot...


Registry entries deleted on Reboot...

Nowy Log:

OTL logfile created on: 2011-03-18 23:13:30 - Run 2

OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\AnteK\Moje dokumenty\Pobieranie

Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 6.0.2900.2180)

Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd


446,00 Mb Total Physical Memory | 49,00 Mb Available Physical Memory | 11,00% Memory free

1,00 Gb Paging File | 1,00 Gb Available in Paging File | 69,00% Paging File free

Paging file location(s): C:\pagefile.sys 768 1536 [binary data]


%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 98,45 Gb Total Space | 79,38 Gb Free Space | 80,62% Space Free | Partition Type: NTFS

Drive D: | 29,54 Gb Total Space | 12,22 Gb Free Space | 41,37% Space Free | Partition Type: NTFS


Computer Name: ADMIN-7021EFE8F | User Name: AnteK | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days


[color=#E56717]========== Processes (SafeList) ==========[/color]


PRC - [2011-03-18 22:19:27 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\AnteK\Moje dokumenty\Pobieranie\OTL_3.2.22.3(dobreprogramy.pl).exe

PRC - [2011-03-06 15:22:19 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe

PRC - [2011-03-05 22:29:28 | 000,396,152 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe

PRC - [2010-12-20 12:41:52 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe

PRC - [2010-12-20 12:41:51 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

PRC - [2010-12-20 12:41:51 | 000,267,944 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe

PRC - [2010-12-16 06:19:28 | 012,984,928 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe

PRC - [2010-11-04 00:00:00 | 000,138,632 | ---- | M] (WinAbility® Software Corporation) -- C:\Program Files\Folder Guard\FGKey.exe

PRC - [2010-01-14 22:11:00 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

PRC - [2006-11-17 05:42:52 | 000,577,536 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE

PRC - [2005-11-01 04:15:12 | 000,163,840 | ---- | M] (S3 Graphics Co., Ltd.) -- C:\WINDOWS\system32\VTTrayp.exe

PRC - [2005-03-08 03:33:28 | 000,053,248 | ---- | M] (S3 Graphics, Inc.) -- C:\WINDOWS\system32\VTTimer.exe

PRC - [2004-08-03 23:44:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe



[color=#E56717]========== Modules (SafeList) ==========[/color]


MOD - [2011-03-18 22:19:27 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\AnteK\Moje dokumenty\Pobieranie\OTL_3.2.22.3(dobreprogramy.pl).exe

MOD - [2010-11-04 00:00:00 | 000,114,056 | ---- | M] (WinAbility® Software Corporation) -- C:\Program Files\Folder Guard\FGH32.dll

MOD - [2004-08-03 23:44:16 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\winsta.dll

MOD - [2004-08-03 23:44:16 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wtsapi32.dll

MOD - [2004-08-03 23:42:34 | 001,050,624 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll



[color=#E56717]========== Win32 Services (SafeList) ==========[/color]


SRV - File not found [Disabled | Stopped] -- -- (HidServ)

SRV - [2010-12-20 12:41:52 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)

SRV - [2010-12-20 12:41:51 | 000,267,944 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)



[color=#E56717]========== Driver Services (SafeList) ==========[/color]


DRV - [2010-12-22 11:13:18 | 000,042,016 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\Xprotector.sys -- (XPROTECTOR)

DRV - [2010-12-20 12:41:52 | 000,135,096 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)

DRV - [2010-12-20 12:41:52 | 000,061,960 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)

DRV - [2010-11-04 00:00:00 | 000,056,976 | ---- | M] (WinAbility® Software Corporation) [Kernel | Auto | Running] -- C:\Program Files\Folder Guard\FGUARD32.sys -- (FGUARD32)

DRV - [2009-05-11 12:49:19 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)

DRV - [2009-05-11 10:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)

DRV - [2007-03-08 14:34:46 | 004,027,840 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)

DRV - [2006-10-17 20:22:26 | 000,009,216 | R--- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\videX32.sys -- (videX32)

DRV - [2004-08-03 23:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C)



[color=#E56717]========== Standard Registry (SafeList) ==========[/color]



[color=#E56717]========== Internet Explorer ==========[/color]


IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


[color=#E56717]========== FireFox ==========[/color]


FF - prefs.js..browser.search.selectedEngine: ""

FF - prefs.js..browser.search.useDBForOrder: true

FF - prefs.js..browser.startup.homepage: ""

FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22

FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24

FF - prefs.js..network.proxy.backup.ftp: "127.0.0.1"

FF - prefs.js..network.proxy.backup.ftp_port: 9666

FF - prefs.js..network.proxy.backup.gopher: "127.0.0.1"

FF - prefs.js..network.proxy.backup.gopher_port: 9666

FF - prefs.js..network.proxy.backup.socks: "127.0.0.1"

FF - prefs.js..network.proxy.backup.socks_port: 9666

FF - prefs.js..network.proxy.backup.ssl: "127.0.0.1"

FF - prefs.js..network.proxy.backup.ssl_port: 9666

FF - prefs.js..network.proxy.ftp: "127.0.0.1"

FF - prefs.js..network.proxy.ftp_port: 9666

FF - prefs.js..network.proxy.gopher: "127.0.0.1"

FF - prefs.js..network.proxy.gopher_port: 9666

FF - prefs.js..network.proxy.http: "127.0.0.1"

FF - prefs.js..network.proxy.http_port: 9666

FF - prefs.js..network.proxy.share_proxy_settings: true

FF - prefs.js..network.proxy.socks: "127.0.0.1"

FF - prefs.js..network.proxy.socks_port: 9666

FF - prefs.js..network.proxy.ssl: "127.0.0.1"

FF - prefs.js..network.proxy.ssl_port: 9666

FF - prefs.js..network.proxy.type: 0



FF - HKLM\software\mozilla\Mozilla Firefox 3.6.15\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-03-06 21:58:04 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.15\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-03-06 15:22:33 | 000,000,000 | ---D | M]


[2010-12-20 15:33:28 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Extensions

[2011-03-18 23:12:15 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Firefox\Profiles\n4smg1jc.default\extensions

[2011-01-15 16:43:38 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Firefox\Profiles\n4smg1jc.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}

[2011-03-05 22:29:47 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Firefox\Profiles\n4smg1jc.default\extensions\engine@conduit.com

[2011-03-18 22:10:12 | 000,001,860 | ---- | M] () -- C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Firefox\Profiles\n4smg1jc.default\searchplugins\search.xml

[2011-03-06 15:23:19 | 000,001,583 | ---- | M] () -- C:\Documents and Settings\AnteK\Dane aplikacji\Mozilla\Firefox\Profiles\n4smg1jc.default\searchplugins\web-search.xml

[2011-03-18 22:20:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions

[2011-02-03 21:12:08 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

[2011-03-06 10:42:29 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}

[2011-02-03 21:11:23 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF

[2011-02-02 21:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll

[2011-03-06 15:22:25 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml

[2011-03-06 15:22:25 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml

[2011-03-06 15:22:26 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml

[2011-03-06 15:22:26 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml

[2011-03-06 15:22:26 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml

[2011-03-06 15:22:26 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml


O1 HOSTS File: ([2001-10-26 17:45:16 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

O2 - BHO: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found.

O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)

O3 - HKLM\..\Toolbar: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found.

O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No CLSID value found.

O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.

O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)

O4 - HKLM..\Run: [FG_Monitor] C:\Program Files\Folder Guard\FGKey.exe (WinAbility® Software Corporation)

O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)

O4 - HKLM..\Run: [VTTimer] C:\WINDOWS\System32\VTTimer.exe (S3 Graphics, Inc.)

O4 - HKLM..\Run: [VTTrayp] C:\WINDOWS\System32\VTTrayp.exe (S3 Graphics Co., Ltd.)

O4 - HKCU..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe ()

O4 - HKCU..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.)

O4 - HKCU..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery present

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)

O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.63 62.179.1.62

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home

O24 - Desktop WallPaper: C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp

O24 - Desktop BackupWallPaper: C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2010-12-20 10:21:36 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [NTFS]

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*


[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]


[2011-03-18 23:08:09 | 000,000,000 | ---D | C] -- C:\_OTL

[2011-03-18 22:30:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\Dane aplikacji\PriceGong

[2011-03-18 15:11:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\.gstreamer-0.10

[2011-03-18 14:18:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt

[2011-03-18 14:17:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\Dane aplikacji\ipla

[2011-03-12 22:36:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\Menu Start\Programy\Theorica Divx ;-) Codecs

[2011-03-12 22:36:41 | 000,000,000 | ---D | C] -- C:\Program Files\Theorica Divx ;-) Codecs

[2011-03-06 13:41:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\Folder Guard

[2011-03-06 13:40:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Folder Guard

[2011-03-06 13:40:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Folder Guard

[2011-03-06 13:40:11 | 000,000,000 | ---D | C] -- C:\Program Files\Folder Guard

[2011-03-06 10:45:01 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java

[2011-03-06 10:42:26 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe

[2011-03-06 10:42:26 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe

[2011-03-06 10:42:26 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe

[2011-03-06 10:41:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\McAfee

[2011-03-05 23:22:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\ALLPlayer

[2011-03-05 23:22:07 | 000,000,000 | ---D | C] -- C:\Program Files\NAPI-PROJEKT

[2011-03-05 23:21:40 | 000,000,000 | ---D | C] -- C:\Program Files\ALLPlayer

[2011-03-05 22:32:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\Moje dokumenty\Downloads

[2011-03-05 22:30:03 | 000,000,000 | ---D | C] -- C:\Program Files\Conduit

[2011-03-05 22:30:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\Conduit

[2011-03-05 22:30:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\uTorrentBar

[2011-03-05 22:29:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\ConduitEngine

[2011-03-05 22:29:56 | 000,000,000 | ---D | C] -- C:\Program Files\ConduitEngine

[2011-03-05 22:29:49 | 000,000,000 | ---D | C] -- C:\Program Files\uTorrentBar

[2011-03-05 22:29:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\Temp

[2011-03-05 22:29:28 | 000,000,000 | ---D | C] -- C:\Program Files\uTorrent

[2011-03-05 22:28:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\AnteK\Dane aplikacji\uTorrent

[2011-03-03 09:20:50 | 000,000,000 | --SD | C] -- C:\Documents and Settings\AnteK\UserData


[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]


[2011-03-18 23:14:00 | 000,001,164 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-1060284298-839522115-500UA.job

[2011-03-18 23:10:00 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2011-03-18 23:09:59 | 468,242,432 | -HS- | M] () -- C:\hiberfil.sys

[2011-03-18 14:26:01 | 000,016,896 | ---- | M] () -- C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011-03-18 14:14:00 | 000,001,112 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-1060284298-839522115-500Core.job

[2011-03-17 09:22:25 | 000,935,566 | ---- | M] () -- C:\Documents and Settings\AnteK\Pulpit\indeks.jpeg

[2011-03-16 16:10:42 | 000,363,511 | ---- | M] () -- C:\Documents and Settings\AnteK\Pulpit\2w6ut0l.jpg

[2011-03-12 08:49:12 | 004,007,842 | ---- | M] () -- C:\Documents and Settings\AnteK\Pulpit\sprzymierzeni-wielka polsko.mp3

[2011-03-12 08:48:01 | 004,281,187 | ---- | M] () -- C:\Documents and Settings\AnteK\Pulpit\sprzymierzeni-ta dzielnica.mp3

[2011-03-12 08:47:56 | 003,520,502 | ---- | M] () -- C:\Documents and Settings\AnteK\Pulpit\sprzymierzeni-interwencje policyjne.mp3

[2011-03-12 08:26:20 | 003,115,081 | ---- | M] () -- C:\Documents and Settings\AnteK\Pulpit\sexualna.mp3

[2011-03-05 23:22:12 | 000,000,694 | ---- | M] () -- C:\Documents and Settings\AnteK\Pulpit\ALLPlayer V4.6.lnk

[2011-03-03 08:32:36 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl


[color=#E56717]========== Files Created - No Company Name ==========[/color]


[2011-03-16 16:13:52 | 000,935,566 | ---- | C] () -- C:\Documents and Settings\AnteK\Pulpit\indeks.jpeg

[2011-03-16 16:10:41 | 000,363,511 | ---- | C] () -- C:\Documents and Settings\AnteK\Pulpit\2w6ut0l.jpg

[2011-03-12 08:45:53 | 004,007,842 | ---- | C] () -- C:\Documents and Settings\AnteK\Pulpit\sprzymierzeni-wielka polsko.mp3

[2011-03-12 08:45:01 | 003,520,502 | ---- | C] () -- C:\Documents and Settings\AnteK\Pulpit\sprzymierzeni-interwencje policyjne.mp3

[2011-03-12 08:44:32 | 004,281,187 | ---- | C] () -- C:\Documents and Settings\AnteK\Pulpit\sprzymierzeni-ta dzielnica.mp3

[2011-03-12 08:23:47 | 003,115,081 | ---- | C] () -- C:\Documents and Settings\AnteK\Pulpit\sexualna.mp3

[2011-03-05 23:22:12 | 000,000,694 | ---- | C] () -- C:\Documents and Settings\AnteK\Pulpit\ALLPlayer V4.6.lnk

[2011-03-05 23:21:57 | 000,797,184 | ---- | C] () -- C:\WINDOWS\System32\ac3filter.ax

[2011-03-05 23:21:57 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll

[2011-02-09 20:27:19 | 000,016,896 | ---- | C] () -- C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2010-12-25 00:23:45 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI

[2010-12-22 11:13:18 | 000,042,016 | ---- | C] () -- C:\WINDOWS\System32\drivers\Xprotector.sys

[2010-12-20 15:22:09 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat

[2010-12-20 14:52:39 | 000,000,003 | ---- | C] () -- C:\WINDOWS\treeskp.sys

[2010-12-20 14:52:39 | 000,000,003 | ---- | C] () -- C:\WINDOWS\sbacknt.bin

[2010-12-20 12:05:26 | 000,147,456 | R--- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll

[2010-12-20 11:09:00 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI

[2010-12-20 11:07:53 | 000,093,480 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2010-12-20 10:24:21 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat

[2010-12-20 10:18:14 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat

[2006-08-23 10:33:46 | 000,006,144 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll

[2006-02-25 12:12:34 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll

[2006-02-25 12:09:38 | 000,774,144 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll

[2004-08-03 23:56:48 | 000,001,788 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin

[2004-08-03 23:44:00 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll

[2004-08-02 13:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat

[2004-07-17 10:36:38 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys

[2002-11-18 17:02:58 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\MMAVILNG.exe

[2002-11-15 14:11:28 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\MMSwitch.dll

[2002-10-06 20:42:58 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll

[2002-10-05 01:04:26 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll

[2002-10-05 01:04:26 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\VORBIS.DLL

[2002-10-05 01:04:18 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\OGG.DLL

[2001-10-26 18:15:16 | 000,355,486 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat

[2001-10-26 18:15:16 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat

[2001-10-26 18:15:16 | 000,049,492 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat

[2001-10-26 18:15:16 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat

[2001-08-23 15:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin

[2001-08-23 15:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat

[2001-08-17 23:30:24 | 000,311,604 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat

[2001-08-17 23:30:24 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat

[2001-08-17 23:30:24 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat

[2001-08-17 23:30:22 | 000,039,992 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat

[2001-08-17 23:15:38 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin

[2001-07-22 00:36:48 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat

[2001-07-22 00:36:04 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat

[2001-07-22 00:24:16 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat


< End of report >

djkamil09061991 · 18 Marzec 2011 22:31

Jeszcze usuwanie kosmetyczne, wklej w OTL:

:OTL O2 - BHO: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (no name) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. [2011-03-05 22:30:03 | 000,000,000 | —D | C] – C:\Program Files\Conduit [2011-03-05 22:30:03 | 000,000,000 | —D | C] – C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\Conduit [2011-03-05 22:29:59 | 000,000,000 | —D | C] – C:\Documents and Settings\AnteK\Ustawienia lokalne\Dane aplikacji\ConduitEngine [2011-03-05 22:29:56 | 000,000,000 | —D | C] – C:\Program Files\ConduitEngine :Commands [emptytemp]

po wykonaniu skryptu i restarcie komputera, naciśnij w OTL sprzątanie, następnie ustaw w przeglądarce swoja strone startową i to na tyle

Portowiec · 18 Marzec 2011 22:42

Super!!Wszystko dziala jak przedtem Dziekuje Ci bardzo dobry czlowieku:) Pozdrawiam Serdecznie

anon89827741 · 19 Marzec 2011 00:20

Portowiec , proszę zapoznaj się z tą stroną oraz tym tematem, a następnie popraw tytuł tematu, używając przycisku