Przeglądarki obciążaja maksymalnie procesor

[chwastek]

Witam ,

Problem polega na tym, po ok 10min jak korzystam z przeglądarki(bez znaczenia FF, Opera, IE) obciąża maksymalnie

Zrzut ekranu z “Menadżera zadań Windows”

Umieszcam log z HijackThis

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:34:29, on 13.12.2007 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Eset\nod32kui.exe C:\Program Files\ULI5289\ALi5289.exe C:\Program Files\ULI5289\JMAP5289.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe E:\Programy\Biurowe\OmniPage\OpwareSE2.exe E:\Programy\Biurowe\Adobe\AdobeProfesional\Distillr\Acrotray.exe C:\WINDOWS\system32\ctfmon.exe E:\Programy\Biurowe\DAEMON Tools\daemon.exe E:\Programy\komunikacja\activpocet\wcescomm.exe C:\Program Files\Eraser\Eraser.exe c:\usr\MYSQL\bin\mysqld.exe C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\slserv.exe E:\Programy\Biurowe\Alcohol 120\StarWind\StarWindService.exe C:\WINDOWS\system32\svchost.exe C:\PROGRAM FILES\COMMON FILES\YDP\USERACCESSMANAGER\useraccess.exe E:\Programy\komunikacja\Gadu-Gadu\gg.exe E:\Programy\Multimedia\Winamp\winamp.exe E:\Programy\KOMUNI~1\ACTIVP~1\rapimgr.exe C:\Program Files\Internet Explorer\iexplore.exe c:\program files\winamp toolbar\WinampTbServer.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://alice.aol.de R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://alice.aol.de R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://alice.aol.de R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Lacza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Programy\Biurowe\Adobe\AdobeProfesional\ActiveX\AcroIEHelper.dll O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: Expressivo - {85F685C3-20D9-4943-95E4-EB4224056C3F} - C:\Program Files\ivo\Expressivo Demo\integr\ih-iexplorer\IH_iexplorer.dll O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - E:\Programy\Biurowe\Adobe\AdobeProfesional\Acrobat\AcroIEFavClient.dll O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - E:\Programy\Biurowe\canon\Easy-WebPrint\Toolband.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - E:\Programy\Biurowe\Adobe\AdobeProfesional\Acrobat\AcroIEFavClient.dll O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll O3 - Toolbar: Expressivo - {85F685C3-20D9-4943-95E4-EB4224056C3F} - C:\Program Files\ivo\Expressivo Demo\integr\ih-iexplorer\IH_iexplorer.dll O4 - HKLM…\Run: [nod32kui] “C:\Program Files\Eset\nod32kui.exe” /WAITSERVICE O4 - HKLM…\Run: [ALi5289] C:\Program Files\ULI5289\ALi5289.exe O4 - HKLM…\Run: [JMAP5289] C:\Program Files\ULI5289\JMAP5289.exe O4 - HKLM…\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM…\Run: [nwiz] nwiz.exe /install O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM…\Run: [sunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe” O4 - HKLM…\Run: [OpwareSE2] “E:\Programy\Biurowe\OmniPage\OpwareSE2.exe” O4 - HKLM…\Run: [OPSE reminder] “E:\Programy\Biurowe\OmniPage\EregGer\Ereg.exe” -r “E:\Programy\Biurowe\OmniPage\EregGer\ereg.ini” O4 - HKLM…\Run: [Acrobat Assistant 7.0] “E:\Programy\Biurowe\Adobe\AdobeProfesional\Distillr\Acrotray.exe” O4 - HKCU…\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU…\Run: [DAEMON Tools] “E:\Programy\Biurowe\DAEMON Tools\daemon.exe” -lang 1033 O4 - HKCU…\Run: [H/PC Connection Agent] “E:\Programy\komunikacja\activpocet\wcescomm.exe” O4 - HKCU…\Run: [Orb] “C:\Program Files\Winamp Remote\bin\OrbTray.exe” /background O4 - HKCU…\Run: [DeskSpace] C:\Program Files\DeskSpace\deskspace.exe O4 - HKCU…\Run: [Expressivo] “C:\Program Files\ivo\Expressivo Demo\expressivo.exe” -t O4 - HKCU…\Run: [Eraser] C:\Program Files\Eraser\Eraser.exe -hide O4 - HKUS\S-1-5-19…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘USLUGA LOKALNA’) O4 - HKUS\S-1-5-20…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘USLUGA SIECIOWA’) O4 - HKUS\S-1-5-18…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SYSTEM’) O4 - HKUS.DEFAULT…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘Default user’) O4 - Startup: OpenOffice.org 2.3.lnk = E:\Programy\Biurowe\Office11\program\quickstart.exe O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ? O8 - Extra context menu item: Winamp Toolbar Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html O8 - Extra context menu item: Convert link target to Adobe PDF - res://E:\Programy\Biurowe\Adobe\AdobeProfesional\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert link target to existing PDF - res://E:\Programy\Biurowe\Adobe\AdobeProfesional\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert selected links to Adobe PDF - res://E:\Programy\Biurowe\Adobe\AdobeProfesional\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert selected links to existing PDF - res://E:\Programy\Biurowe\Adobe\AdobeProfesional\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Convert selection to Adobe PDF - res://E:\Programy\Biurowe\Adobe\AdobeProfesional\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert selection to existing PDF - res://E:\Programy\Biurowe\Adobe\AdobeProfesional\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert to Adobe PDF - res://E:\Programy\Biurowe\Adobe\AdobeProfesional\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert to existing PDF - res://E:\Programy\Biurowe\Adobe\AdobeProfesional\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Easy-WebPrint - Drucken - res://E:\Programy\Biurowe\canon\Easy-WebPrint\Resource.dll/RC_Print.html O8 - Extra context menu item: Easy-WebPrint - Schnelldruck - res://E:\Programy\Biurowe\canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html O8 - Extra context menu item: Easy-WebPrint - Vorschau - res://E:\Programy\Biurowe\canon\Easy-WebPrint\Resource.dll/RC_Preview.html O8 - Extra context menu item: Easy-WebPrint - Zu Druckliste hinzufügen - res://E:\Programy\Biurowe\canon\Easy-WebPrint\Resource.dll/RC_AddToList.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - E:\Programy\KOMUNI~1\ACTIVP~1\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - E:\Programy\KOMUNI~1\ACTIVP~1\INetRepl.dll O9 - Extra ‘Tools’ menuitem: Utwórz lacze Ulubione dla urzadzenia przenosnego… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - E:\Programy\KOMUNI~1\ACTIVP~1\INetRepl.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\program files\spyware doctor\filterlsp.dll O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda … 8742678453 O17 - HKLM\System\CCS\Services\Tcpip…{448FDBC7-B153-4223-B150-06F5289C75B7}: NameServer = 213.191.92.82 213.191.74.11 O17 - HKLM\System\CS1\Services\Tcpip…{448FDBC7-B153-4223-B150-06F5289C75B7}: NameServer = 213.191.92.82 213.191.74.11 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: MySql - Unknown owner - c:\usr/MYSQL/bin/mysqld.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - E:\Programy\Biurowe\Alcohol 120\StarWind\StarWindService.exe O23 - Service: Securom User Access for Windows 2000 and Windows XP a technology by Sony DADC (UserAccess) - Unknown owner - C:\PROGRAM FILES\COMMON FILES\YDP\USERACCESSMANAGER\useraccess.exe – End of file - 9867 bytes

I loga z Silent Runners

“Silent Runners.vbs”, revision 55, http://www.silentrunners.org/ Operating System: Windows XP SP2 Output limited to non-default values, except where indicated by “{++}” Startup items buried in registry: --------------------------------- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++} “CTFMON.EXE” = “C:\WINDOWS\system32\ctfmon.exe” [MS] “DAEMON Tools” = ““E:\Programy\Biurowe\DAEMON Tools\daemon.exe” -lang 1033” [“DT Soft Ltd.”] “H/PC Connection Agent” = ““E:\Programy\komunikacja\activpocet\wcescomm.exe”” [MS] “Orb” = ““C:\Program Files\Winamp Remote\bin\OrbTray.exe” /background” [“Orb Networks”] “DeskSpace” = “C:\Program Files\DeskSpace\deskspace.exe” [“OtakuSoftware”] “Expressivo” = ““C:\Program Files\ivo\Expressivo Demo\expressivo.exe” -t” [“IVO Software Sp. z o.o.”] “Eraser” = “C:\Program Files\Eraser\Eraser.exe -hide” [“Heidi Computers Ltd”] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++} “nod32kui” = ““C:\Program Files\Eset\nod32kui.exe” /WAITSERVICE” [“Eset “] “ALi5289” = “C:\Program Files\ULI5289\ALi5289.exe” [empty string] “JMAP5289” = “C:\Program Files\ULI5289\JMAP5289.exe” [null data] “SoundMan” = “SOUNDMAN.EXE” [“Realtek Semiconductor Corp.”] “NvCplDaemon” = “RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup” [MS] “nwiz” = “nwiz.exe /install” [“NVIDIA Corporation”] “NvMediaCenter” = “RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit” [MS] “SunJavaUpdateSched” = ““C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe”” [“Sun Microsystems, Inc.”] “OpwareSE2” = ““E:\Programy\Biurowe\OmniPage\OpwareSE2.exe”” [“ScanSoft, Inc.”] “OPSE reminder” = ““E:\Programy\Biurowe\OmniPage\EregGer\Ereg.exe” -r “E:\Programy\Biurowe\OmniPage\EregGer\ereg.ini”” [“ScanSoft, Inc.”] “Acrobat Assistant 7.0” = ““E:\Programy\Biurowe\Adobe\AdobeProfesional\Distillr\Acrotray.exe”” [“Adobe Systems Inc.”] “(Default)” = (empty string) [file not found] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}(Default) = (no title provided) - {HKLM…CLSID} = “AcroIEHlprObj Class” \InProcServer32(Default) = “E:\Programy\Biurowe\Adobe\AdobeProfesional\ActiveX\AcroIEHelper.dll” [“Adobe Systems Incorporated”] {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}(Default) = “Winamp Toolbar BHO” - {HKLM…CLSID} = “Winamp Toolbar BHO” \InProcServer32(Default) = “C:\Program Files\Winamp Toolbar\winamptb.dll” [“AOL LLC”] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}(Default) = (no title provided) - {HKLM…CLSID} = “SSVHelper Class” \InProcServer32(Default) = “C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll” [“Sun Microsystems, Inc.”] {85F685C3-20D9-4943-95E4-EB4224056C3F}(Default) = (no title provided) - {HKLM…CLSID} = “Expressivo” \InProcServer32(Default) = “C:\Program Files\ivo\Expressivo Demo\integr\ih-iexplorer\IH_iexplorer.dll” [“IVO Software Sp. z o.o.”] {AE7CD045-E861-484f-8273-0445EE161910}(Default) = (no title provided) - {HKLM…CLSID} = “AcroIEToolbarHelper Class” \InProcServer32(Default) = “E:\Programy\Biurowe\Adobe\AdobeProfesional\Acrobat\AcroIEFavClient.dll” [“Adobe Systems Incorporated”] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ “{42071714-76d4-11d1-8b24-00a0c9068ff3}” = “Rozszerzenie CPL kadrowania wyswietlania” - {HKLM…CLSID} = “Rozszerzenie CPL kadrowania wyswietlania” \InProcServer32(Default) = “deskpan.dll” [file not found] “{88895560-9AA2-1069-930E-00AA0030EBC8}” = “Rozszerzenie ikony HyperTerminalu” - {HKLM…CLSID} = “HyperTerminal Icon Ext” \InProcServer32(Default) = “C:\WINDOWS\system32\hticons.dll” [“Hilgraeve, Inc.”] “{B089FE88-FB52-11D3-BDF1-0050DA34150D}” = “NOD32 Context Menu Shell Extension” - {HKLM…CLSID} = “NOD32 Context Menu Shell Extension” \InProcServer32(Default) = “C:\Program Files\Eset\nodshex.dll” [null data] “{B41DB860-8EE4-11D2-9906-E49FADC173CA}” = “WinRAR shell extension” - {HKLM…CLSID} = “WinRAR” \InProcServer32(Default) = “C:\Program Files\WinRAR\rarext.dll” [null data] “{A70C977A-BF00-412C-90B7-034C51DA2439}” = “NvCpl DesktopContext Class” - {HKLM…CLSID} = “DesktopContext Class” \InProcServer32(Default) = “C:\WINDOWS\system32\nvcpl.dll” [“NVIDIA Corporation”] “{1CDB2949-8F65-4355-8456-263E7C208A5D}” = “Desktop Explorer” - {HKLM…CLSID} = “Desktop Explorer” \InProcServer32(Default) = “C:\WINDOWS\system32\nvshell.dll” [“NVIDIA Corporation”] “{1E9B04FB-F9E5-4718-997B-B8DA88302A47}” = “Desktop Explorer Menu” - {HKLM…CLSID} = (no title provided) \InProcServer32(Default) = “C:\WINDOWS\system32\nvshell.dll” [“NVIDIA Corporation”] “{1E9B04FB-F9E5-4718-997B-B8DA88302A48}” = “nView Desktop Context Menu” - {HKLM…CLSID} = “nView Desktop Context Menu” \InProcServer32(Default) = “C:\WINDOWS\system32\nvshell.dll” [“NVIDIA Corporation”] “{FFB699E0-306A-11d3-8BD1-00104B6F7516}” = “Play on my TV helper” - {HKLM…CLSID} = “NVIDIA CPL Extension” \InProcServer32(Default) = “C:\WINDOWS\system32\nvcpl.dll” [“NVIDIA Corporation”] “{32020A01-506E-484D-A2A8-BE3CF17601C3}” = “AlcoholShellEx” - {HKLM…CLSID} = “AlcoholShellEx” \InProcServer32(Default) = “E:\Programy\Biurowe\ALCOHO~1\axshlex.dll” [“Alcohol Soft Development Team”] “{D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802}” = “Adobe.Acrobat.ContextMenu” - {HKLM…CLSID} = “Acrobat Elements Context Menu” \InProcServer32(Default) = “E:\Programy\Biurowe\Adobe\AdobeProfesional\Acrobat Elements\ContextMenu.dll” [“Adobe Systems Inc.”] “{49BF5420-FA7F-11cf-8011-00A0C90A8F78}” = “Mobile Device” - {HKLM…CLSID} = “Urzadzenie przenosne” \InProcServer32(Default) = “E:\Programy\KOMUNI~1\ACTIVP~1\Wcesview.dll” [MS] “{8BE13461-936F-11D1-A87D-444553540000}” = “Eraser Shell Extension” - {HKLM…CLSID} = “Eraser Shell Extension” \InProcServer32(Default) = “C:\WINDOWS\system32\erasext.dll” [”-”] “{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}” = “OpenOffice.org Column Handler” - {HKLM…CLSID} = (no title provided) \InProcServer32(Default) = ““E:\Programy\Biurowe\Office11\program\shlxthdl.dll”” [“Sun Microsystems, Inc.”] “{087B3AE3-E237-4467-B8DB-5A38AB959AC9}” = “OpenOffice.org Infotip Handler” - {HKLM…CLSID} = (no title provided) \InProcServer32(Default) = ““E:\Programy\Biurowe\Office11\program\shlxthdl.dll”” [“Sun Microsystems, Inc.”] “{63542C48-9552-494A-84F7-73AA6A7C99C1}” = “OpenOffice.org Property Sheet Handler” - {HKLM…CLSID} = (no title provided) \InProcServer32(Default) = ““E:\Programy\Biurowe\Office11\program\shlxthdl.dll”” [“Sun Microsystems, Inc.”] “{3B092F0C-7696-40E3-A80F-68D74DA84210}” = “OpenOffice.org Thumbnail Viewer” - {HKLM…CLSID} = (no title provided) \InProcServer32(Default) = ““E:\Programy\Biurowe\Office11\program\shlxthdl.dll”” [“Sun Microsystems, Inc.”] HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\ {C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}(Default) = “OpenOffice.org Column Handler” - {HKLM…CLSID} = (no title provided) \InProcServer32(Default) = ““E:\Programy\Biurowe\Office11\program\shlxthdl.dll”” [“Sun Microsystems, Inc.”] {F9DB5320-233E-11D1-9F84-707F02C10627}(Default) = “PDF Column Info” - {HKLM…CLSID} = “PDF Shell Extension” \InProcServer32(Default) = “E:\Programy\Biurowe\Adobe\AdobeProfesional\ActiveX\PDFShell.dll” [“Adobe Systems, Inc.”] HKLM\SOFTWARE\Classes*\shellex\ContextMenuHandlers\ Adobe.Acrobat.ContextMenu(Default) = “{D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802}” - {HKLM…CLSID} = “Acrobat Elements Context Menu” \InProcServer32(Default) = “E:\Programy\Biurowe\Adobe\AdobeProfesional\Acrobat Elements\ContextMenu.dll” [“Adobe Systems Inc.”] Erasext(Default) = “{8BE13461-936F-11D1-A87D-444553540000}” - {HKLM…CLSID} = “Eraser Shell Extension” \InProcServer32(Default) = “C:\WINDOWS\system32\erasext.dll” ["-"] NOD32 Context Menu Shell Extension(Default) = “{B089FE88-FB52-11D3-BDF1-0050DA34150D}” - {HKLM…CLSID} = “NOD32 Context Menu Shell Extension” \InProcServer32(Default) = “C:\Program Files\Eset\nodshex.dll” [null data] WinRAR(Default) = “{B41DB860-8EE4-11D2-9906-E49FADC173CA}” - {HKLM…CLSID} = “WinRAR” \InProcServer32(Default) = “C:\Program Files\WinRAR\rarext.dll” [null data] HKLM\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\ WinRAR(Default) = “{B41DB860-8EE4-11D2-9906-E49FADC173CA}” - {HKLM…CLSID} = “WinRAR” \InProcServer32(Default) = “C:\Program Files\WinRAR\rarext.dll” [null data] HKLM\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\ Erasext(Default) = “{8BE13461-936F-11D1-A87D-444553540000}” - {HKLM…CLSID} = “Eraser Shell Extension” \InProcServer32(Default) = “C:\WINDOWS\system32\erasext.dll” ["-"] NOD32 Context Menu Shell Extension(Default) = “{B089FE88-FB52-11D3-BDF1-0050DA34150D}” - {HKLM…CLSID} = “NOD32 Context Menu Shell Extension” \InProcServer32(Default) = “C:\Program Files\Eset\nodshex.dll” [null data] WinRAR(Default) = “{B41DB860-8EE4-11D2-9906-E49FADC173CA}” - {HKLM…CLSID} = “WinRAR” \InProcServer32(Default) = “C:\Program Files\WinRAR\rarext.dll” [null data] Group Policies {GPedit.msc branch and setting}: ----------------------------------------------- Note: detected settings may not have any effect. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ “shutdownwithoutlogon” = (REG_DWORD) dword:0x00000001 {Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| Shutdown: Allow system to be shut down without having to log on} “undockwithoutlogon” = (REG_DWORD) dword:0x00000001 {Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| Devices: Allow undock without having to log on} Active Desktop and Wallpaper: ----------------------------- Active Desktop may be disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState Displayed if Active Desktop enabled and wallpaper not set by Group Policy: HKCU\Software\Microsoft\Internet Explorer\Desktop\General\ “Wallpaper” = “C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp” Displayed if Active Desktop disabled and wallpaper not set by Group Policy: HKCU\Control Panel\Desktop\ “Wallpaper” = “C:\Documents and Settings\Grzegorz\Dane aplikacji\OtakuSoftware\DeskSpace\DesktopWallpaperCache\Desktop_0.dds” Startup items in “Grzegorz” “All Users” startup folders: ---------------------------------------------------------- C:\Documents and Settings\Grzegorz\Menu Start\Programy\Autostart “OpenOffice.org 2.3” - shortcut to: “E:\Programy\Biurowe\Office11\program\quickstart.exe” [null data] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart “Adobe Acrobat Speed Launcher” - shortcut to: “C:\WINDOWS\Installer{AC76BA86-1033-0000-7760-000000000002}\SC_Acrobat.exe” [null data] Enabled Scheduled Tasks: ------------------------ “Uniblue SpeedUpMyPC Nag” - launches: “C:\Program Files\Uniblue\SpeedUpMyPC\SpeedUpMyPC.exe -s” [file not found] “Uniblue SpeedUpMyPC” - launches: “C:\Program Files\Uniblue\SpeedUpMyPC\SpeedUpMyPC.exe -s” [file not found] Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = “%SystemRoot%\System32\mswsock.dll” [MS] 000000000002\LibraryPath = “%SystemRoot%\System32\winrnr.dll” [MS] 000000000003\LibraryPath = “%SystemRoot%\System32\mswsock.dll” [MS] Transport Service Providers HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: C:\WINDOWS\system32\imon.dll ["Eset "], 01 - 05, 13 %SystemRoot%\system32\mswsock.dll [MS], 06 - 08, 14 - 30 %SystemRoot%\system32\rsvpsp.dll [MS], 09 - 10 C:\Program Files\Common Files\PC Tools\LSP\PCTLsp.dll [“PC Tools Research Pty Ltd.”], 11 C:\Program Files\Spyware Doctor\FilterLSP.dll [null data], 12 Toolbars, Explorer Bars, Extensions: ------------------------------------ Toolbars HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ “{47833539-D0C5-4125-9FA8-0819E2EAAC93}” - {HKLM…CLSID} = “Adobe PDF” \InProcServer32(Default) = “E:\Programy\Biurowe\Adobe\AdobeProfesional\Acrobat\AcroIEFavClient.dll” [“Adobe Systems Incorporated”] “{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}” - {HKLM…CLSID} = “Winamp Toolbar” \InProcServer32(Default) = “C:\Program Files\Winamp Toolbar\winamptb.dll” [“AOL LLC”] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ “{327C2873-E90D-4C37-AA9D-10AC9BABA46C}” = “Easy-WebPrint” - {HKLM…CLSID} = “Easy-WebPrint” \InProcServer32(Default) = “E:\Programy\Biurowe\canon\Easy-WebPrint\Toolband.dll” [null data] “{47833539-D0C5-4125-9FA8-0819E2EAAC93}” = (no title provided) - {HKLM…CLSID} = “Adobe PDF” \InProcServer32(Default) = “E:\Programy\Biurowe\Adobe\AdobeProfesional\Acrobat\AcroIEFavClient.dll” [“Adobe Systems Incorporated”] “{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}” = “Winamp Toolbar” - {HKLM…CLSID} = “Winamp Toolbar” \InProcServer32(Default) = “C:\Program Files\Winamp Toolbar\winamptb.dll” [“AOL LLC”] “{85F685C3-20D9-4943-95E4-EB4224056C3F}” = “Expressivo” - {HKLM…CLSID} = “Expressivo” \InProcServer32(Default) = “C:\Program Files\ivo\Expressivo Demo\integr\ih-iexplorer\IH_iexplorer.dll” [“IVO Software Sp. z o.o.”] Explorer Bars HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\ {182EC0BE-5110-49C8-A062-BEB1D02A220B}(Default) = (no title provided) - {HKLM…CLSID} = “Adobe PDF” \InProcServer32(Default) = “E:\Programy\Biurowe\Adobe\AdobeProfesional\Acrobat\AcroIEFavClient.dll” [“Adobe Systems Incorporated”] HKLM\SOFTWARE\Classes\CLSID{03C1C47F-0538-4645-8372-D3109B9FC636}(Default) = “Easy-WebPrint” Implemented Categories{00021493-0000-0000-C000-000000000046}\ [vertical bar] InProcServer32(Default) = “E:\Programy\Biurowe\canon\Easy-WebPrint\Toolband.dll” [null data] Extensions (Tools menu items, main toolbar menu buttons) HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\ {08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ “MenuText” = “Sun Java Konsole” “CLSIDExtension” = “{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}” - {HKCU…CLSID} = “Java Plug-in 1.6.0_03” \InProcServer32(Default) = “C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll” [“Sun Microsystems, Inc.”] - {HKLM…CLSID} = “Java Plug-in 1.6.0_03” \InProcServer32(Default) = “C:\Program Files\Java\jre1.6.0_03\bin\npjpi160_03.dll” [“Sun Microsystems, Inc.”] {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F}\ “ButtonText” = “Create Mobile Favorite” “CLSIDExtension” = “{2EAF5BB0-070F-11D3-9307-00C04FAE2D4F}” - {HKLM…CLSID} = “Create Mobile Favorite” \InProcServer32(Default) = “E:\Programy\KOMUNI~1\ACTIVP~1\INetRepl.dll” [MS] {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F}\ “MenuText” = “Utwórz lacze Ulubione dla urzadzenia przenosnego…” “CLSIDExtension” = “{2EAF5BB0-070F-11D3-9307-00C04FAE2D4F}” - {HKLM…CLSID} = “Create Mobile Favorite” \InProcServer32(Default) = “E:\Programy\KOMUNI~1\ACTIVP~1\INetRepl.dll” [MS] {FB5F1910-F110-11D2-BB9E-00C04F795683}\ “ButtonText” = “Messenger” “MenuText” = “Windows Messenger” “Exec” = “C:\Program Files\Messenger\msmsgs.exe” [MS] Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ MySql, MySql, “c:\usr/MYSQL/bin/mysqld.exe” [null data] NOD32 Kernel Service, NOD32krn, ““C:\Program Files\Eset\nod32krn.exe”” ["Eset "] NVIDIA Display Driver Service, NVSvc, “C:\WINDOWS\system32\nvsvc32.exe” [“NVIDIA Corporation”] Securom User Access for Windows 2000 and Windows XP a technology by Sony DADC, UserAccess, “C:\PROGRAM FILES\COMMON FILES\YDP\USERACCESSMANAGER\useraccess.exe” [null data] SmartLinkService, SLService, “slserv.exe” [“Smart Link”] StarWind iSCSI Service, StarWindService, “E:\Programy\Biurowe\Alcohol 120\StarWind\StarWindService.exe” [“Rocket Division Software”] Usluga Pomocnik IPv6, 6to4, “C:\WINDOWS\system32\svchost.exe -k netsvcs” {“C:\WINDOWS\System32\6to4svc.dll” [MS]} Windows User Mode Driver Framework, UMWdf, “C:\WINDOWS\system32\wdfmgr.exe” [MS] Print Monitors: --------------- HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors\ Adobe PDF Port\Driver = “C:\WINDOWS\system32\AdobePDF.dll” [“Adobe Systems Incorporated.”] Canon BJ Language Monitor MP150\Driver = “CNMLM7K.DLL” [“CANON INC.”] ---------- (launch time: 2007-12-13 20:03:49) + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + To search all directories of local fixed drives for DESKTOP.INI DLL launch points, use the -supp parameter or answer “No” at the first message box and “Yes” at the second message box. ---------- (total run time: 48 seconds, including 10 seconds for message boxes)

Za wszelaką pomoc z góry dziękuje

pozdrawiam

[Gutek]

Optymalizacja XP: viewtopic.php?t=76580

Czyszczenie rejestru:

RegCleaner - http://www.dobreprogramy.pl/index.php?dz=2&t=29&id=177

możesz rejestr przelecieć albo

jv16 PowerTools - http://www.dobreprogramy.pl/index.php?dz=2&t=29&id=509

Opis RegCleaner - http://www.agavk.p9.pl/strony/progra_regcleaner.php

Zobacz - Obsługa jv16 PowerTools