Strona startowa qooqlle

kamil9298 · 21 Kwiecień 2011 10:15

Od wczoraj moja strona startowa w google chrome cały czas zmienia się na qooqlle.com i nie wiem już co z tym zrobić. Poniżej zamieszczam logi z OTL. Bardzo proszę o pomoc.

Log OTL

OTL logfile created on: 2011-04-21 12:00:00 - Run 1 OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Kamil\Desktop 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 59,00% Memory free 5,00 Gb Paging File | 4,00 Gb Available in Paging File | 78,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 30,00 Gb Total Space | 6,72 Gb Free Space | 22,39% Space Free | Partition Type: NTFS Drive D: | 267,99 Gb Total Space | 116,23 Gb Free Space | 43,37% Space Free | Partition Type: NTFS Computer Name: KAMIL-LAPTOP | User Name: Kamil | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (All) ========== PRC - [2011-04-21 11:19:43 | 000,580,608 | ---- | M] (OldTimer Tools) – C:\Users\Kamil\Desktop\OTL_3.2.22.3(dobreprogramy.pl).exe PRC - [2011-04-13 02:51:02 | 001,004,088 | ---- | M] (Google Inc.) – C:\Users\Kamil\AppData\Local\Google\Chrome\Application\chrome.exe PRC - [2011-03-07 15:33:40 | 000,421,160 | ---- | M] (Apple Inc.) – D:\Programy\iTunes\iTunesHelper.exe PRC - [2011-03-03 21:20:11 | 000,107,136 | ---- | M] (TMRG, Inc.) – C:\Program Files (x86)\RelevantKnowledge\rlservice.exe PRC - [2011-03-03 21:20:08 | 002,548,864 | ---- | M] (TMRG, Inc.) – C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe PRC - [2011-02-18 16:37:16 | 000,037,664 | ---- | M] (Apple Inc.) – C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe PRC - [2010-11-04 07:54:54 | 000,673,040 | ---- | M] (Microsoft Corporation) – C:\Program Files (x86)\Internet Explorer\iexplore.exe PRC - [2010-10-29 15:49:28 | 000,249,064 | ---- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe PRC - [2010-10-07 13:23:00 | 000,345,376 | ---- | M] (Apple Inc.) – C:\Program Files (x86)\Bonjour\mDNSResponder.exe PRC - [2010-09-07 18:12:02 | 002,838,912 | ---- | M] (AVAST Software) – C:\Program Files\Alwil Software\Avast5\AvastUI.exe PRC - [2010-09-07 18:11:59 | 000,040,384 | ---- | M] (AVAST Software) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe PRC - [2009-07-14 03:14:31 | 000,044,544 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\rundll32.exe PRC - [2008-03-19 02:31:20 | 004,742,184 | ---- | M] (Yahoo! Inc.) – D:\Programy\Yahoo!\Widgets\YahooWidgets.exe ========== Modules (All) ========== MOD - [2011-04-21 11:19:43 | 000,580,608 | ---- | M] (OldTimer Tools) – C:\Users\Kamil\Desktop\OTL_3.2.22.3(dobreprogramy.pl).exe MOD - [2010-08-21 07:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) – C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll MOD - [2010-07-27 16:03:24 | 012,867,584 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\shell32.dll MOD - [2010-06-29 07:02:02 | 001,413,632 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\ole32.dll MOD - [2010-04-07 09:10:36 | 000,571,904 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\oleaut32.dll MOD - [2010-03-24 08:37:04 | 001,289,528 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\ntdll.dll MOD - [2009-12-11 09:39:06 | 000,022,016 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\secur32.dll MOD - [2009-12-11 09:36:33 | 000,096,768 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\sspicli.dll MOD - [2009-07-14 03:16:19 | 000,268,800 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\Wldap32.dll MOD - [2009-07-14 03:16:17 | 001,123,328 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\vssapi.dll MOD - [2009-07-14 03:16:17 | 000,627,200 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\usp10.dll MOD - [2009-07-14 03:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\vsstrace.dll MOD - [2009-07-14 03:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\version.dll MOD - [2009-07-14 03:16:15 | 000,171,008 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\spp.dll MOD - [2009-07-14 03:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\srclient.dll MOD - [2009-07-14 03:16:14 | 001,668,608 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\setupapi.dll MOD - [2009-07-14 03:16:14 | 000,350,208 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\shlwapi.dll MOD - [2009-07-14 03:16:14 | 000,179,712 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\shdocvw.dll MOD - [2009-07-14 03:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\sechost.dll MOD - [2009-07-14 03:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\samlib.dll MOD - [2009-07-14 03:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\samcli.dll MOD - [2009-07-14 03:16:12 | 000,988,160 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\propsys.dll MOD - [2009-07-14 03:16:12 | 000,090,112 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\olepro32.dll MOD - [2009-07-14 03:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\profapi.dll MOD - [2009-07-14 03:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\psapi.dll MOD - [2009-07-14 03:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\ntmarta.dll MOD - [2009-07-14 03:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\netutils.dll MOD - [2009-07-14 03:15:50 | 000,690,688 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\msvcrt.dll MOD - [2009-07-14 03:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\msctf.dll MOD - [2009-07-14 03:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\dwmapi.dll MOD - [2009-07-14 03:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\devobj.dll MOD - [2009-07-14 03:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\comdlg32.dll MOD - [2009-07-14 03:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\cryptbase.dll MOD - [2009-07-14 03:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\clbcatq.dll MOD - [2009-07-14 03:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\cfgmgr32.dll MOD - [2009-07-14 03:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\atl.dll MOD - [2009-07-14 03:14:53 | 000,640,000 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\advapi32.dll MOD - [2009-07-14 03:14:53 | 000,292,352 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\apphelp.dll MOD - [2009-07-14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\msscript.ocx MOD - [2009-07-14 03:14:08 | 000,319,488 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\winspool.drv MOD - [2009-07-14 03:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\user32.dll MOD - [2009-07-14 03:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\uxtheme.dll MOD - [2009-07-14 03:11:23 | 000,836,608 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\kernel32.dll MOD - [2009-07-14 03:11:23 | 000,662,528 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\rpcrt4.dll MOD - [2009-07-14 03:11:23 | 000,269,824 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\KernelBase.dll MOD - [2009-07-14 03:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\lpk.dll MOD - [2009-07-14 03:11:21 | 000,310,784 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\gdi32.dll MOD - [2009-07-14 03:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\imm32.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - [2010-11-13 00:53:10 | 000,202,752 | ---- | M] (AMD) [Auto | Running] – C:\Windows\SysNative\atiesrxx.exe – (AMD External Events Utility) SRV:64bit: - [2010-09-07 18:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe – (avast! Web Scanner) SRV:64bit: - [2010-09-07 18:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe – (avast! Mail Scanner) SRV:64bit: - [2010-09-07 18:11:59 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe – (avast! Antivirus) SRV:64bit: - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend) SRV:64bit: - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\SysNative\appmgmts.dll – (AppMgmt) SRV - [2011-03-03 21:20:11 | 000,107,136 | ---- | M] (TMRG, Inc.) [Auto | Running] – C:\Program Files (x86)\RelevantKnowledge\rlservice.exe – (RelevantKnowledge) SRV - [2010-06-14 16:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] – C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe – (ServiceLayer) SRV - [2010-03-18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe – (clr_optimization_v4.0.30319_32) SRV - [2010-02-19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe – (SwitchBoard) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe – (clr_optimization_v2.0.50727_32) SRV - [2007-04-13 22:09:56 | 000,792,112 | ---- | M] (Nero AG) [On_Demand | Stopped] – D:\Programy\Nero 7\Nero BackItUp\NBService.exe – (NBService) ========== Driver Services (SafeList) ========== DRV:64bit: - [2011-02-18 16:36:58 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\usbaapl64.sys – (USBAAPL64) DRV:64bit: - [2010-11-14 18:08:31 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\sptd.sys – (sptd) DRV:64bit: - [2010-11-13 14:40:05 | 000,056,320 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\L1E62x64.sys – (L1E) DRV:64bit: - [2010-11-13 14:35:06 | 000,119,312 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\AtiHdmi.sys – (AtiHdmiService) DRV:64bit: - [2010-11-13 00:53:11 | 006,181,376 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\atikmdag.sys – (atikmdag) DRV:64bit: - [2010-09-07 17:47:33 | 000,061,008 | ---- | M] (AVAST Software) [File_System | Auto | Running] – C:\Windows\SysNative\drivers\aswMonFlt.sys – (aswMonFlt) DRV:64bit: - [2010-02-26 15:33:40 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\usbser_lowerfltx64j.sys – (UsbserFilt) DRV:64bit: - [2010-02-26 15:33:24 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys – (upperdev) DRV:64bit: - [2010-02-26 15:33:22 | 000,025,088 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\ccdcmbox64.sys – (nmwcdcx64) DRV:64bit: - [2010-02-26 15:33:22 | 000,019,456 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\ccdcmbx64.sys – (nmwcdx64) DRV:64bit: - [2010-02-26 15:21:22 | 000,173,056 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\nmwcdnsux64.sys – (nmwcdnsux64) DRV:64bit: - [2010-02-26 15:21:20 | 000,012,288 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\nmwcdnsucx64.sys – (nmwcdnsucx64) DRV:64bit: - [2009-10-05 17:34:00 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\athrx.sys – (athr) DRV:64bit: - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\amdsata.sys – (amdsata) DRV:64bit: - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\amdxata.sys – (amdxata) DRV:64bit: - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\amdsbs.sys – (amdsbs) DRV:64bit: - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\lsi_sas2.sys – (LSI_SAS2) DRV:64bit: - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\HpSAMD.sys – (HpSAMD) DRV:64bit: - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\stexstor.sys – (stexstor) DRV:64bit: - [2009-07-14 02:06:32 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\usbser.sys – (usbser) DRV:64bit: - [2009-07-09 17:11:32 | 001,222,144 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\viahduaa.sys – (VIAHdAudAddService) DRV:64bit: - [2009-06-10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] – C:\Windows\SysNative\wbem\ntfs.mof – (Ntfs) DRV:64bit: - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\evbda.sys – (ebdrv) DRV:64bit: - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\bxvbda.sys – (b06bdrv) DRV:64bit: - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\b57nd60a.sys – (b57nd60a) DRV:64bit: - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\hcw85cir.sys – (hcw85cir) DRV:64bit: - [2009-06-06 03:15:56 | 001,806,400 | ---- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\snp2uvc.sys – (SNP2UVC) USB2.0 PC Camera (SNP2UVC) DRV:64bit: - [2009-05-18 14:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\GEARAspiWDM.sys – (GEARAspiWDM) DRV:64bit: - [2009-02-24 19:35:44 | 000,255,552 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\mcdbus.sys – (mcdbus) DRV:64bit: - [2008-08-28 13:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\pccsmcfdx64.sys – (pccsmcfd) DRV:64bit: - [2007-08-09 02:21:00 | 000,013,680 | ---- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\ATK64AMD.sys – (MTsensor) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM…\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - Reg Error: Key error. File not found IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qooqlle.com/ IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: “ProxyEnable” = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: “ProxyOverride” = *.local FF - HKLM\software\mozilla\Firefox\Extensions\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2010-11-13 14:21:59 | 000,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\Extensions\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010-12-10 21:32:31 | 000,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\Extensions\{6E19037A-12E3-4295-8915-ED48BC341614}: C:\Program Files (x86)\RelevantKnowledge [2011-04-21 08:25:44 | 000,000,000 | —D | M] FF - HKLM\software\mozilla\Thunderbird\Extensions\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2010-11-13 14:21:59 | 000,000,000 | —D | M] O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found. O3 - HKLM…\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found. O4 - HKLM…\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software) O4 - HKLM…\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA) O4 - HKLM…\Run: [svhost] C:\Program Files (x86)\Common Files\svhost.exe () O4 - HKLM…\Run: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) O4 - HKCU…\Run: [] File not found O4 - Startup: C:\Users\Kamil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk = File not found O4 - Startup: C:\Users\Kamil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Yahoo! Widgets.lnk = D:\Programy\Yahoo!\Widgets\YahooWidgets.exe (Yahoo! Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra ‘Tools’ menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files (x86)\Yahoo!\Common\Yinsthelper.dll (Installation Support) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta … s-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta … s-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta … s-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 94.251.160.14 94.251.182.11 O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2{a5d28fa5-f009-11df-bfa1-485b394f5c1e}\Shell - “” = AutoRun O33 - MountPoints2{a5d28fa5-f009-11df-bfa1-485b394f5c1e}\Shell\AutoRun\command - “” = F:\Install.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:64bit: - HKLM…comfile [open] – “%1” %* O35:64bit: - HKLM…exefile [open] – “%1” %* O35 - HKLM…comfile [open] – “%1” %* O35 - HKLM…exefile [open] – “%1” %* O37:64bit: - HKLM…com [@ = comfile] – “%1” %* O37:64bit: - HKLM…exe [@ = exefile] – “%1” %* O37 - HKLM…com [@ = comfile] – “%1” %* O37 - HKLM…exe [@ = exefile] – “%1” %* ========== Files/Folders - Created Within 30 Days ========== [2011-04-21 11:54:39 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge [2011-04-21 11:34:40 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\jv16 PowerTools [2011-04-21 11:23:08 | 000,000,000 | —D | C] – C:_OTL [2011-04-21 11:19:38 | 000,580,608 | ---- | C] (OldTimer Tools) – C:\Users\Kamil\Desktop\OTL_3.2.22.3(dobreprogramy.pl).exe [2011-04-21 11:13:11 | 000,000,000 | —D | C] – C:\Users\Kamil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome [2011-04-19 16:46:01 | 000,000,000 | —D | C] – C:\Users\Kamil\AppData\Local\searchplugins [2011-04-19 12:36:21 | 000,331,776 | RHS- | C] (Created with WinAutomation (http://www.WinAutomation.com)) – C:\ProgramData\winloqon.exe [2011-04-19 12:36:19 | 000,339,968 | RHS- | C] (Created with WinAutomation (http://www.WinAutomation.com)) – C:\ProgramData\csrs.exe [2011-04-18 15:26:02 | 000,000,000 | —D | C] – C:\Users\Kamil\Desktop\LMFAO-Party_Rock-2009-CMS [2011-04-17 18:25:30 | 000,000,000 | —D | C] – C:\Users\Kamil\Documents\GTA San Andreas User Files [2011-04-17 18:03:02 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games [2011-04-12 21:55:22 | 000,000,000 | —D | C] – C:\Users\Kamil\Documents\Cities In Motion [2011-04-10 13:09:51 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes [2011-04-10 13:09:26 | 000,000,000 | —D | C] – C:\Program Files\iTunes [2011-04-10 13:09:26 | 000,000,000 | —D | C] – C:\Program Files\iPod [2011-04-01 23:25:17 | 000,000,000 | —D | C] – C:\Users\Kamil\Documents\Avatar [2011-04-01 23:22:26 | 000,000,000 | —D | C] – C:\ProgramData\CyberLink [2011-04-01 23:22:24 | 000,000,000 | —D | C] – C:\Users\Kamil\AppData\Roaming\CyberLink [2011-04-01 23:21:49 | 000,000,000 | —D | C] – C:\Users\Kamil\Documents\Youcam [2011-04-01 23:21:48 | 000,000,000 | —D | C] – C:\Users\Kamil\AppData\Local\CyberLink [2011-04-01 23:10:03 | 000,000,000 | —D | C] – C:\ProgramData\Temp [2011-03-29 15:48:50 | 000,000,000 | —D | C] – C:\Users\Kamil\Documents\My Games [2011-03-29 15:44:54 | 000,000,000 | —D | C] – C:\Program Files (x86)\AGEIA Technologies [2011-03-29 15:44:51 | 000,000,000 | —D | C] – C:\Program Files (x86)\NVIDIA Corporation [2011-03-29 15:44:39 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Wise Installation Wizard [2011-03-27 22:31:36 | 000,000,000 | —D | C] – C:\Users\Kamil\Documents\My Widgets [2011-03-27 22:31:26 | 000,000,000 | —D | C] – C:\Program Files (x86)\Yahoo! [2011-03-27 22:31:25 | 000,000,000 | —D | C] – C:\Users\Kamil\AppData\Local\Yahoo [2011-03-27 22:31:22 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Yahoo! Widgets [2011-03-26 19:35:17 | 000,000,000 | —D | C] – C:\ProgramData\EA Core [2011-03-26 15:38:30 | 000,000,000 | —D | C] – C:\Downloads ========== Files - Modified Within 30 Days ========== [2011-04-21 11:59:10 | 000,014,416 | -H-- | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011-04-21 11:59:10 | 000,014,416 | -H-- | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011-04-21 11:52:00 | 000,001,042 | ---- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011-04-21 11:51:34 | 000,067,584 | --S- | M] () – C:\Windows\bootstat.dat [2011-04-21 11:51:27 | 2213,920,768 | -HS- | M] () – C:\hiberfil.sys [2011-04-21 11:35:00 | 000,001,046 | ---- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011-04-21 11:34:40 | 000,000,657 | ---- | M] () – C:\Users\Kamil\Desktop\jv16 PowerTools.lnk [2011-04-21 11:19:43 | 000,580,608 | ---- | M] (OldTimer Tools) – C:\Users\Kamil\Desktop\OTL_3.2.22.3(dobreprogramy.pl).exe [2011-04-21 11:13:13 | 000,002,320 | ---- | M] () – C:\Users\Kamil\Desktop\Google Chrome.lnk [2011-04-19 12:36:17 | 000,331,776 | RHS- | M] (Created with WinAutomation (http://www.WinAutomation.com)) – C:\ProgramData\winloqon.exe [2011-04-19 12:36:16 | 006,854,144 | RHS- | M] () – C:\Program Files (x86)\Common Files\svhost.exe [2011-04-19 12:36:16 | 000,339,968 | RHS- | M] (Created with WinAutomation (http://www.WinAutomation.com)) – C:\ProgramData\csrs.exe [2011-04-18 16:23:02 | 001,661,232 | ---- | M] () – C:\Windows\SysNative\PerfStringBackup.INI [2011-04-18 16:23:02 | 000,737,480 | ---- | M] () – C:\Windows\SysNative\perfh015.dat [2011-04-18 16:23:02 | 000,651,648 | ---- | M] () – C:\Windows\SysNative\perfh009.dat [2011-04-18 16:23:02 | 000,154,136 | ---- | M] () – C:\Windows\SysNative\perfc015.dat [2011-04-18 16:23:02 | 000,120,580 | ---- | M] () – C:\Windows\SysNative\perfc009.dat [2011-04-17 18:03:01 | 000,000,715 | ---- | M] () – C:\Users\Public\Desktop\GTA San Andreas.lnk [2011-04-10 13:09:52 | 000,001,535 | ---- | M] () – C:\Users\Public\Desktop\iTunes.lnk [2011-03-31 08:02:48 | 000,001,728 | ---- | M] () – C:\Users\Public\Desktop\Adobe Reader 9.lnk [2011-03-27 22:31:38 | 000,000,709 | ---- | M] () – C:\Users\Kamil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Yahoo! Widgets.lnk [2011-03-26 19:31:41 | 001,637,498 | ---- | M] () – C:\Windows\SysWow64\PerfStringBackup.INI ========== Files Created - No Company Name ========== [2011-04-21 11:34:40 | 000,000,657 | ---- | C] () – C:\Users\Kamil\Desktop\jv16 PowerTools.lnk [2011-04-21 11:13:13 | 000,002,320 | ---- | C] () – C:\Users\Kamil\Desktop\Google Chrome.lnk [2011-04-19 12:36:19 | 006,854,144 | RHS- | C] () – C:\Program Files (x86)\Common Files\svhost.exe [2011-04-17 18:03:01 | 000,000,715 | ---- | C] () – C:\Users\Public\Desktop\GTA San Andreas.lnk [2011-04-16 11:24:40 | 000,000,615 | ---- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk [2011-04-10 13:09:52 | 000,001,535 | ---- | C] () – C:\Users\Public\Desktop\iTunes.lnk [2011-03-27 22:31:38 | 000,000,709 | ---- | C] () – C:\Users\Kamil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Yahoo! Widgets.lnk [2011-03-26 19:31:30 | 001,637,498 | ---- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI [2010-12-25 14:09:55 | 000,066,872 | ---- | C] () – C:\Windows\SysWow64\PnkBstrA.exe [2010-12-25 14:09:48 | 000,183,112 | ---- | C] () – C:\Windows\SysWow64\PnkBstrB.exe [2010-12-08 21:21:21 | 000,000,056 | -H-- | C] () – C:\ProgramData\ezsidmv.dat [2010-11-13 15:49:56 | 000,790,528 | ---- | C] () – C:\Windows\SysWow64\xvidcore.dll [2010-11-13 15:49:56 | 000,258,048 | ---- | C] () – C:\Windows\SysWow64\libFLAC.dll [2010-11-13 12:39:41 | 000,000,000 | ---- | C] () – C:\Windows\ativpsrm.bin [2009-07-14 07:38:36 | 000,067,584 | --S- | C] () – C:\Windows\bootstat.dat [2009-07-14 04:35:51 | 000,000,741 | ---- | C] () – C:\Windows\SysWow64\NOISE.DAT [2009-07-14 04:34:42 | 000,215,943 | ---- | C] () – C:\Windows\SysWow64\dssec.dat [2009-07-14 02:10:29 | 000,043,131 | ---- | C] () – C:\Windows\mib.bin [2009-07-14 01:42:10 | 000,064,000 | ---- | C] () – C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 23:03:59 | 000,364,544 | ---- | C] () – C:\Windows\SysWow64\msjetoledb40.dll [2009-06-10 23:26:10 | 000,673,088 | ---- | C] () – C:\Windows\SysWow64\mlang.dat [2003-04-01 13:37:16 | 000,233,472 | R— | C] () – C:\Windows\SysWow64\MafiaSetup.exe ========== LOP Check ========== [2011-04-18 16:08:32 | 000,000,000 | —D | M] – C:\Users\Kamil\AppData\Roaming\AIMP [2010-11-14 18:12:29 | 000,000,000 | —D | M] – C:\Users\Kamil\AppData\Roaming\DAEMON Tools Lite [2011-01-08 14:30:10 | 000,000,000 | —D | M] – C:\Users\Kamil\AppData\Roaming\Gadu-Gadu 10 [2010-12-24 17:54:01 | 000,000,000 | —D | M] – C:\Users\Kamil\AppData\Roaming\Leadertech [2010-11-13 14:26:09 | 000,000,000 | —D | M] – C:\Users\Kamil\AppData\Roaming\Nokia [2011-01-08 13:27:27 | 000,000,000 | —D | M] – C:\Users\Kamil\AppData\Roaming\OpenFM [2010-11-13 14:29:17 | 000,000,000 | —D | M] – C:\Users\Kamil\AppData\Roaming\PC Suite [2011-04-21 09:07:03 | 000,000,000 | —D | M] – C:\Users\Kamil\AppData\Roaming\uTorrent [2011-04-10 12:52:58 | 000,032,604 | ---- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== < End of report >

Log Extras

OTL Extras logfile created on: 2011-04-21 12:00:00 - Run 1 OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Kamil\Desktop 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 59,00% Memory free 5,00 Gb Paging File | 4,00 Gb Available in Paging File | 78,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 30,00 Gb Total Space | 6,72 Gb Free Space | 22,39% Space Free | Partition Type: NTFS Drive D: | 267,99 Gb Total Space | 116,23 Gb Free Space | 43,37% Space Free | Partition Type: NTFS Computer Name: KAMIL-LAPTOP | User Name: Kamil | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes] .url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes] .cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation) ========== Shell Spawning ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\shell[command]\command] batfile [open] – “%1” %* File not found cmdfile [open] – “%1” %* File not found comfile [open] – “%1” %* File not found exefile [open] – “%1” %* File not found helpfile [open] – Reg Error: Key error. inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe “%1” (Microsoft Corporation) InternetShortcut [open] – “C:\Windows\System32\rundll32.exe” “C:\Windows\System32\ieframe.dll”,OpenURL %l (Microsoft Corporation) InternetShortcut [print] – “C:\Windows\System32\rundll32.exe” “C:\Windows\System32\mshtml.dll”,PrintHTML “%1” (Microsoft Corporation) piffile [open] – “%1” %* File not found regfile [merge] – Reg Error: Key error. scrfile [config] – “%1” File not found scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l File not found scrfile [open] – “%1” /S File not found txtfile [edit] – Reg Error: Key error. Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found Directory [bridge] – D:\Programy\Adobe Photoshop\Adobe Bridge CS5\Bridge.exe “%L” (Adobe Systems, Inc.) Directory [cmd] – cmd.exe /s /k pushd “%V” (Microsoft Corporation) Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] – Reg Error: Value error. Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\shell[command]\command] batfile [open] – “%1” %* cmdfile [open] – “%1” %* comfile [open] – “%1” %* cplfile [cplopen] – %SystemRoot%\System32\control.exe “%1”,%* (Microsoft Corporation) exefile [open] – “%1” %* helpfile [open] – Reg Error: Key error. inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe “%1” (Microsoft Corporation) piffile [open] – “%1” %* regfile [merge] – Reg Error: Key error. scrfile [config] – “%1” scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] – “%1” /S txtfile [edit] – Reg Error: Key error. Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [bridge] – D:\Programy\Adobe Photoshop\Adobe Bridge CS5\Bridge.exe “%L” (Adobe Systems, Inc.) Directory [cmd] – cmd.exe /s /k pushd “%V” (Microsoft Corporation) Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] – Reg Error: Value error. Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] “cval” = 1 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] “VistaSp1” = 28 4D B2 76 41 04 CA 01 [binary data] “AntiVirusOverride” = 0 “AntiSpywareOverride” = 0 “FirewallOverride” = 0 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] “DisableNotifications” = 0 “EnableFirewall” = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] “DisableNotifications” = 0 “EnableFirewall” = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] “DisableNotifications” = 0 “EnableFirewall” = 1 ========== Authorized Applications List ========== ========== HKEY_LOCAL_MACHINE Uninstall List ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] “{071c9b48-7c32-4621-a0ac-3f809523288f}” = Microsoft Visual C++ 2005 Redistributable (x64) “{1E9FC118-651D-4934-97BE-E53CAE5C7D45}” = Microsoft_VC80_MFCLOC_x86_x64 “{405CCE33-483B-D5D7-B90C-75D1E74F5E18}” = ATI Catalyst Install Manager “{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}” = Microsoft_VC80_CRT_x86_x64 “{4D668D4F-FAA2-4726-834C-31F4614F312E}” = MSVC80_x64_v2 “{73D236C3-4B0F-140C-C3C6-89D017783198}” = ccc-utility64 “{8557397C-A42D-486F-97B3-A2CBC2372593}” = Microsoft_VC90_ATL_x86_x64 “{8E34682C-8118-31F1-BC4C-98CD9675E1C2}” = Microsoft .NET Framework 4 Extended “{8F473675-D702-45F9-8EBC-342B40C17BF5}” = Apple Mobile Device Support “{90140000-0011-0000-1000-0000000FF1CE}” = Microsoft Office Professional Plus 2010 “{90140000-0015-0415-1000-0000000FF1CE}” = Microsoft Office Access MUI (Polish) 2010 “{90140000-0016-0415-1000-0000000FF1CE}” = Microsoft Office Excel MUI (Polish) 2010 “{90140000-0018-0415-1000-0000000FF1CE}” = Microsoft Office PowerPoint MUI (Polish) 2010 “{90140000-0019-0415-1000-0000000FF1CE}” = Microsoft Office Publisher MUI (Polish) 2010 “{90140000-001A-0415-1000-0000000FF1CE}” = Microsoft Office Outlook MUI (Polish) 2010 “{90140000-001B-0415-1000-0000000FF1CE}” = Microsoft Office Word MUI (Polish) 2010 “{90140000-001F-0407-1000-0000000FF1CE}” = Microsoft Office Proof (German) 2010 “{90140000-001F-0409-1000-0000000FF1CE}” = Microsoft Office Proof (English) 2010 “{90140000-001F-0415-1000-0000000FF1CE}” = Microsoft Office Proof (Polish) 2010 “{90140000-002C-0415-1000-0000000FF1CE}” = Microsoft Office Proofing (Polish) 2010 “{90140000-0043-0000-1000-0000000FF1CE}” = Microsoft Office Office 32-bit Components 2010 “{90140000-0043-0415-1000-0000000FF1CE}” = Microsoft Office Shared 32-bit MUI (Polish) 2010 “{90140000-0044-0415-1000-0000000FF1CE}” = Microsoft Office InfoPath MUI (Polish) 2010 “{90140000-006E-0415-1000-0000000FF1CE}” = Microsoft Office Shared MUI (Polish) 2010 “{90140000-00A1-0415-1000-0000000FF1CE}” = Microsoft Office OneNote MUI (Polish) 2010 “{90140000-00BA-0415-1000-0000000FF1CE}” = Microsoft Office Groove MUI (Polish) 2010 “{925D058B-564A-443A-B4B2-7E90C6432E55}” = Microsoft_VC80_ATL_x86_x64 “{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}” = Microsoft_VC90_CRT_x86_x64 “{9545E9DB-6F4C-4404-BF25-E221BE8B44C5}” = iTunes “{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}” = Microsoft_VC90_MFC_x86_x64 “{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}” = MSVC90_x64 “{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}” = Microsoft_VC80_MFC_x86_x64 “{E4F5E48E-7155-4CF9-88CD-7F377EC9AC54}” = Bonjour “{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}” = Microsoft .NET Framework 4 Client Profile “FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D” = Pakiet sterowników systemu Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) “ffdshow64_is1” = ffdshow x64 v1.1.3611 [2010-10-06] “Microsoft .NET Framework 4 Client Profile” = Microsoft .NET Framework 4 Client Profile “Microsoft .NET Framework 4 Extended” = Microsoft .NET Framework 4 Extended “Office14.PROPLUS” = Microsoft Office Professional Plus 2010 “USB 2.0 1.3M UVC WebCam” = USB 2.0 1.3M UVC WebCam “WinRAR archiver” = Archiwizator WinRAR [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] “{02D4B5D7-483C-AB11-CEC4-A9EA52DB9DD8}” = CCC Help Japanese “{02FA20D9-9E00-AF75-DCC7-6507A01F3FA5}” = Catalyst Control Center Localization All “{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}” = Microsoft_VC90_ATL_x86 “{08D2E121-7F6A-43EB-97FD-629B44903403}” = Microsoft_VC90_CRT_x86 “{0A4076FE-EBDC-BC8F-1130-F0B7B0D4933F}” = CCC Help Finnish “{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}” = Adobe Community Help “{0F358684-06F7-6AB4-2FCE-71E8E216942F}” = CCC Help Portuguese “{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}” = Microsoft_VC80_ATL_x86 “{15FEDA5F-141C-4127-8D7E-B962D1742728}” = Adobe Photoshop CS5 “{196BB40D-1578-3D01-B289-BEFC77A11A1E}” = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 “{1E912493-5247-E3D6-9975-A5825A5FF074}” = CCC Help Polish “{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}” = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 “{20D4A895-748C-4D88-871C-FDB1695B0169}” = Platform “{26A24AE4-039D-4CA4-87B4-2F83216022FF}” = Java 6 Update 24 “{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}” = RealUpgrade 1.1 “{2B0D953A-99D4-E82C-3F9D-4B2624F883B8}” = CCC Help Russian “{2BAE7ABF-509A-980A-1C58-969A6B7CBD19}” = CCC Help Chinese Standard “{2DC94AFD-A6E2-4AB4-9132-4A3F8E07B386}” = Apple Application Support “{2E7BCA31-DBEC-289F-7650-BF3F145557A5}” = Catalyst Control Center Core Implementation “{3654165A-1564-DFA9-14FD-6D350D743E4C}” = CCC Help Greek “{3D715682-E248-0F7A-E18B-2D63257B37D7}” = Catalyst Control Center Graphics Full Existing “{4514C19B-EDD9-F24B-81C4-60F37CA3A778}” = Catalyst Control Center Graphics Previews Vista “{45DF6D99-666D-41FA-8D62-0E183B6240F3}” = PC Connectivity Solution “{466D8396-546C-3C22-33C8-6AC73393D588}” = Catalyst Control Center Graphics Light “{4A03706F-666A-4037-7777-5F2748764D10}” = Java Auto Updater “{56C049BE-79E9-4502-BEA7-9754A3E60F9B}” = neroxml “{57752979-A1C9-4C02-856B-FBB27AC4E02C}” = QuickTime “{5FF1C12B-0F5B-C3FC-A094-086DA900FF10}” = CCC Help Turkish “{61410763-974F-6916-D4D1-5FF656B026A9}” = CCC Help Chinese Traditional “{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}” = Microsoft_VC90_MFC_x86 “{670EE9A7-3F8B-8969-AA86-7D958D7572D1}” = ccc-core-static “{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}” = MSVC80_x86_v2 “{6F93ED7E-6EAF-A393-634C-D117AB6BE7AA}” = CCC Help Dutch “{7299052b-02a4-4627-81f2-1818da5d550d}” = Microsoft Visual C++ 2005 Redistributable “{749A1EDD-16C2-4C63-B013-D38F0F953973}” = OviMPlatform “{757D709F-B2A5-144B-A476-D0FD404E7369}” = CCC Help French “{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}” = RealNetworks - Microsoft Visual C++ 2008 Runtime “{8112C6B3-91E1-4560-8AB9-876DADFA37C5}” = Ovi Desktop Sync Engine “{816460CE-D765-C1B8-486A-63833EDFD013}” = CCC Help English “{837b34e3-7c30-493c-8f6a-2b0f04e2912c}” = Microsoft Visual C++ 2005 Redistributable “{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}” = Microsoft Silverlight “{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}” = Microsoft_VC80_CRT_x86 “{939FF9A6-0DC5-C6F8-6BC2-3EC7E17B9C34}” = Catalyst Control Center InstallProxy “{991B765E-25E4-B573-355A-C2FD3CE7B475}” = CCC Help Spanish “{9A25302D-30C0-39D9-BD6F-21E6EC160475}” = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 “{9B3666A6-757D-4D14-D474-2CE4A8949127}” = CCC Help Czech “{A2104078-AAA5-449E-95DD-55C9443A1045}” = Nero 7 Essentials “{A2BCA9F1-566C-4805-97D1-7FDC93386723}” = Adobe AIR “{A362DE84-CD21-CF34-8963-A6068B8BBE2F}” = CCC Help Danish “{A78FE97A-C0C8-49CE-89D0-EDD524A17392}” = PDF Settings CS5 “{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}” = Google Update Helper “{AC76BA86-7AD7-1045-7B44-A94000000001}” = Adobe Reader 9.4.3 - Polish “{AE7ACD07-35DF-8DC5-927C-6A58E85829ED}” = CCC Help Korean “{AF111648-99A1-453E-81DD-80DBBF6DAD0D}” = MSVC90_x86 “{B5BD4251-C0E3-0F8F-0A88-7EDAB0A83125}” = CCC Help Norwegian “{B8B4446F-87E1-4423-A47A-16832C24A199}” = Nokia Ovi Suite “{C3C84B0F-1333-C391-1078-D9213EC8E351}” = CCC Help German “{C41300B9-185D-475E-BFEC-39EF732F19B1}” = Apple Software Update “{C600D0FA-EFF0-F6CE-0F9F-D02EEEE3E32D}” = CCC Help Hungarian “{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}” = Skype Toolbars “{CED95728-691A-E326-0DCB-D37F51945798}” = Catalyst Control Center Graphics Full New “{D0189738-1F40-C879-0DD2-2CDEEA39DC78}” = CCC Help Swedish “{d08d9f98-1c78-4704-87e6-368b0023d831}” = RelevantKnowledge “{D1A19B02-817E-4296-A45B-07853FD74D57}” = Microsoft_VC80_MFC_x86 “{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}” = GTA San Andreas “{D7BF62E1-58F1-15FE-291A-E3F0BBAEB425}” = CCC Help Thai “{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}” = Microsoft_VC80_MFCLOC_x86 “{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}” = Adobe Media Player “{E10DB5DA-E576-40EA-A7FC-1CB2A7B283A6}” = NVIDIA PhysX “{E3E71D07-CD27-46CB-8448-16D4FB29AA13}” = Microsoft WSE 3.0 Runtime “{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}” = Skype™ 5.0 “{EE5B5B24-EEFC-4C8B-BF8B-256D705BAD89}” = Nokia Ovi Suite Software Updater “{F1FDAA01-988C-423F-AC12-0D8F333943FD}” = Nokia Connectivity Cable Driver “{F5CC181D-67B0-981C-D0EF-D80271013FB0}” = CCC Help Italian “{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}” = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 “Adobe AIR” = Adobe AIR “Adobe Flash Player ActiveX” = Adobe Flash Player 10 ActiveX “Adobe Flash Player Plugin” = Adobe Flash Player 10 Plugin “AIMP2” = AIMP2 “ALLPlayer_is1” = ALLPlayer V4.X “Audacity_is1” = Audacity 1.2.6 “avast5” = avast! Free Antivirus “chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1” = Adobe Community Help “com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1” = Adobe Media Player “Combined Community Codec Pack_is1” = Combined Community Codec Pack 2010-10-10 “conduitEngine” = Conduit Engine “DAEMON Tools Toolbar” = DAEMON Tools Toolbar “EAX Unified” = EAX Unified “Gadu-Gadu 10” = Gadu-Gadu 10 “InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}” = VIA Platforma Menedżera urządzeń “jv16 PowerTools_is1” = jv16 PowerTools 1.3 “NapiProjekt_is1” = NapiProjekt 1.0.6.9 “Nokia Ovi Suite” = Nokia Ovi Suite “RealPlayer 12.0” = RealPlayer “uTorrent” = µTorrent “uTorrentBar Toolbar” = uTorrentBar Toolbar “Yahoo! Widget Engine” = Yahoo! Widgets “YInstHelper” = Yahoo! Install Manager ========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] “Google Chrome” = Google Chrome ========== Last 10 Event Log Errors ========== [Application Events] Error - 2011-04-19 06:45:12 | Computer Name = Kamil-Laptop | Source = SideBySide | ID = 16842785 Description = Nie można wygenerować kontekstu aktywacji dla “C:\Program Files (x86)\Real\RealPlayer\plugins\rmxrend.dll”. Nie można odnaleźć zestawu zależnego Microsoft.VC90.DebugCRT,processorArchitecture=“x86”,publicKeyToken=“1fc8b3b9a1e18e3b”,type=“win32”,version=“9.0.21022.8”. Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error - 2011-04-19 13:39:36 | Computer Name = Kamil-Laptop | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: gta_sa.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x427101ca Nazwa modułu powodującego błąd: gta_sa.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x427101ca Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000dd5a3 Identyfikator procesu powodującego błąd: 0xc60 Godzina uruchomienia aplikacji powodującej błąd: 0x01cbfeb8b19560f5 Ścieżka aplikacji powodującej błąd: D:\Gry\Rockstar Games\GTA San Andreas\gta_sa.exe Ścieżka modułu powodującego błąd: D:\Gry\Rockstar Games\GTA San Andreas\gta_sa.exe Identyfikator raportu: fdac4440-6aab-11e0-b1e9-485b394f5c1e Error - 2011-04-19 13:40:06 | Computer Name = Kamil-Laptop | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: gta_sa.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x427101ca Nazwa modułu powodującego błąd: gta_sa.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x427101ca Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000dd5a3 Identyfikator procesu powodującego błąd: 0xb04 Godzina uruchomienia aplikacji powodującej błąd: 0x01cbfeb8c5e4e1cc Ścieżka aplikacji powodującej błąd: D:\Gry\Rockstar Games\GTA San Andreas\gta_sa.exe Ścieżka modułu powodującego błąd: D:\Gry\Rockstar Games\GTA San Andreas\gta_sa.exe Identyfikator raportu: 0ffdaf26-6aac-11e0-b1e9-485b394f5c1e Error - 2011-04-19 13:40:37 | Computer Name = Kamil-Laptop | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: gta_sa.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x427101ca Nazwa modułu powodującego błąd: gta_sa.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x427101ca Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000dd5a3 Identyfikator procesu powodującego błąd: 0x1384 Godzina uruchomienia aplikacji powodującej błąd: 0x01cbfeb8d8f97d88 Ścieżka aplikacji powodującej błąd: D:\Gry\Rockstar Games\GTA San Andreas\gta_sa.exe Ścieżka modułu powodującego błąd: D:\Gry\Rockstar Games\GTA San Andreas\gta_sa.exe Identyfikator raportu: 22b00d71-6aac-11e0-b1e9-485b394f5c1e Error - 2011-04-19 13:41:42 | Computer Name = Kamil-Laptop | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: gta_sa.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x427101ca Nazwa modułu powodującego błąd: gta_sa.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x427101ca Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000dd5a3 Identyfikator procesu powodującego błąd: 0x1b0 Godzina uruchomienia aplikacji powodującej błąd: 0x01cbfeb8fe4bc015 Ścieżka aplikacji powodującej błąd: D:\Gry\Rockstar Games\GTA San Andreas\gta_sa.exe Ścieżka modułu powodującego błąd: D:\Gry\Rockstar Games\GTA San Andreas\gta_sa.exe Identyfikator raportu: 4965a56c-6aac-11e0-b1e9-485b394f5c1e Error - 2011-04-19 13:43:12 | Computer Name = Kamil-Laptop | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: gta_sa.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x427101ca Nazwa modułu powodującego błąd: gta_sa.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x427101ca Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000dd5a3 Identyfikator procesu powodującego błąd: 0xd14 Godzina uruchomienia aplikacji powodującej błąd: 0x01cbfeb934b34b80 Ścieżka aplikacji powodującej błąd: D:\Gry\Rockstar Games\GTA San Andreas\gta_sa.exe Ścieżka modułu powodującego błąd: D:\Gry\Rockstar Games\GTA San Andreas\gta_sa.exe Identyfikator raportu: 7ef3112c-6aac-11e0-b1e9-485b394f5c1e Error - 2011-04-20 13:36:25 | Computer Name = Kamil-Laptop | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: gta_sa.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x427101ca Nazwa modułu powodującego błąd: gta_sa.exe, wersja: 0.0.0.0, sygnatura czasowa: 0x427101ca Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000dd5a3 Identyfikator procesu powodującego błąd: 0xe60 Godzina uruchomienia aplikacji powodującej błąd: 0x01cbff816aa58988 Ścieżka aplikacji powodującej błąd: D:\Gry\Rockstar Games\GTA San Andreas\gta_sa.exe Ścieżka modułu powodującego błąd: D:\Gry\Rockstar Games\GTA San Andreas\gta_sa.exe Identyfikator raportu: b6a68a3c-6b74-11e0-8def-485b394f5c1e Error - 2011-04-21 05:25:52 | Computer Name = Kamil-Laptop | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: svchost.exe, wersja: 6.1.7600.16385, sygnatura czasowa: 0x4a5bc3c1 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 6.1.7600.16559, sygnatura czasowa: 0x4ba9b802 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000000000001ad1a Identyfikator procesu powodującego błąd: 0x260 Godzina uruchomienia aplikacji powodującej błąd: 0x01cc0003668aed18 Ścieżka aplikacji powodującej błąd: C:\Windows\system32\svchost.exe Ścieżka modułu powodującego błąd: C:\Windows\SYSTEM32\ntdll.dll Identyfikator raportu: 5946e72f-6bf9-11e0-8650-485b394f5c1e Error - 2011-04-21 05:28:47 | Computer Name = Kamil-Laptop | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: rlvknlg.exe, wersja: 1.3.329.336, sygnatura czasowa: 0x4d6ff36c Nazwa modułu powodującego błąd: rlvknlg.exe, wersja: 1.3.329.336, sygnatura czasowa: 0x4d6ff36c Kod wyjątku: 0xc000000d Przesunięcie błędu: 0x00188ccd Identyfikator procesu powodującego błąd: 0xb8c Godzina uruchomienia aplikacji powodującej błąd: 0x01cc000674333648 Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe Ścieżka modułu powodującego błąd: C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe Identyfikator raportu: c1d47a7b-6bf9-11e0-94ca-485b394f5c1e Error - 2011-04-21 05:58:48 | Computer Name = Kamil-Laptop | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: rlvknlg.exe, wersja: 1.3.329.336, sygnatura czasowa: 0x4d6ff36c Nazwa modułu powodującego błąd: rlvknlg.exe, wersja: 1.3.329.336, sygnatura czasowa: 0x4d6ff36c Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x00086d26 Identyfikator procesu powodującego błąd: 0x10f0 Godzina uruchomienia aplikacji powodującej błąd: 0x01cc000ab3cc24e0 Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe Ścieżka modułu powodującego błąd: C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe Identyfikator raportu: f34ac71c-6bfd-11e0-a31b-485b394f5c1e [Media Center Events] Error - 2010-12-26 08:50:10 | Computer Name = Kamil-Laptop | Source = MCUpdate | ID = 0 Description = 13:50:10 - Błąd podczas nawiązywania połączenia z Internetem. 13:50:10 - Nie można skontaktować się z serwerem… [System Events] Error - 2011-03-03 12:29:19 | Computer Name = Kamil-Laptop | Source = bowser | ID = 8003 Description = Error - 2011-03-03 13:43:41 | Computer Name = Kamil-Laptop | Source = Service Control Manager | ID = 7034 Description = Usługa Usługa Bonjour niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2011-03-03 17:05:47 | Computer Name = Kamil-Laptop | Source = Disk | ID = 262155 Description = Sterownik wykrył błąd kontrolera na \Device\Harddisk1\DR1. Error - 2011-03-03 17:05:48 | Computer Name = Kamil-Laptop | Source = Disk | ID = 262155 Description = Sterownik wykrył błąd kontrolera na \Device\Harddisk1\DR1. Error - 2011-03-06 05:53:40 | Computer Name = Kamil-Laptop | Source = volsnap | ID = 393252 Description = Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie można powiększyć magazynu kopii w tle z powodu limitu wprowadzonego przez użytkownika. Error - 2011-03-06 13:50:53 | Computer Name = Kamil-Laptop | Source = Service Control Manager | ID = 7034 Description = Usługa Usługa Bonjour niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2011-03-06 17:48:20 | Computer Name = Kamil-Laptop | Source = Disk | ID = 262155 Description = Sterownik wykrył błąd kontrolera na \Device\Harddisk1\DR1. Error - 2011-03-06 17:48:22 | Computer Name = Kamil-Laptop | Source = Disk | ID = 262155 Description = Sterownik wykrył błąd kontrolera na \Device\Harddisk1\DR1. Error - 2011-03-08 12:18:15 | Computer Name = Kamil-Laptop | Source = volsnap | ID = 393252 Description = Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie można powiększyć magazynu kopii w tle z powodu limitu wprowadzonego przez użytkownika. Error - 2011-03-10 08:10:43 | Computer Name = Kamil-Laptop | Source = Service Control Manager | ID = 7011 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji z usługi eventlog. < End of report >

spandaupol · 21 Kwiecień 2011 10:32

Tutaj jest większy syf niż tylko strona googlle

W okno Własne opcje skanowania / skrypt w OTL wklej:

Klikasz na Wykonaj skrypt. Zgadzasz się na restart komputera. Log z usuwania na forum

Następnie wykonaj pełny skan Malwarebytes http://www.dobreprogramy.pl/Malwarebyte … 13117.html Usuń co znajdzie pokaż log na forum

Następnie ponownie uruchamiasz OTL klikasz raz jeszcze Skanuj i dajesz nowy log na forum Czyli dwa logi jeden z usuwania drugi z nowego skanowania po usuwaniu. Logi wklej na http://www.wklej.org a w poście podaj linki

kamil9298 · 21 Kwiecień 2011 11:14

http://www.wklej.org/id/516655/ log OTL po usuwaniu.

http://www.wklej.org/id/516657/ log z Malwarebytes’ Anti-Malware

http://www.wklej.org/id/516661/ log z OTL z nowego skanowania

Chyba wszystko jest juz OK. Dzieki za pomoc

spandaupol · 21 Kwiecień 2011 15:52

Poprzez Aplet Dodaj Usuń programy odinstaluj

Uruchom OTL klikasz Sprzątanie

Przeczyść system oraz rejestr CCleaner

Wyłącz i włącz przywracanie systemu na wszystkich dyskach. Instrukcja

To było Szybkie skanowanie Malwarebytes ja prosiłem o Pełny skan.

cybul92 · 7 Czerwiec 2011 12:53

Witam,

mam podobny problem - qooqlle wyświetla swoją wyszukiwarkę i stronę startową…

OTL: http://wklej.org/id/542410/

Extras: http://wklej.org/id/542411/

Proszę o pomoc i z góry dziękuję.

Acorus · 7 Czerwiec 2011 13:18

Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qooqlle.com/ IE - HKCU…\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - Reg Error: Key error. File not found FF - prefs.js…browser.search.selectedEngine: “qooqlle” FF - prefs.js…browser.startup.homepage: “http://www.qooqlle.com/” [2011-06-01 19:47:18 | 000,000,000 | —D | M] (uTorrentBar Community Toolbar) – C:\Users\Maciej\AppData\Roaming\mozilla\Firefox\Profiles\90f9sez2.default\extensions{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} [2011-06-01 19:47:19 | 000,000,000 | —D | M] (Conduit Engine) – C:\Users\Maciej\AppData\Roaming\mozilla\Firefox\Profiles\90f9sez2.default\extensions\engine@conduit.com [2011-06-07 14:27:50 | 000,001,860 | ---- | M] () – C:\Users\Maciej\AppData\Roaming\Mozilla\Firefox\Profiles\90f9sez2.default\searchplugins\search.xml [2010-08-12 13:12:24 | 000,005,529 | ---- | M] () – C:\Users\Maciej\AppData\Roaming\Mozilla\Firefox\Profiles\90f9sez2.default\searchplugins\SearchquWebSearch.xml O2 - BHO: (Searchqu Toolbar) - {7FF99715-3016-4381-84CE-E4E4C9673020} - C:\Program Files (x86)\Windows Searchqu Toolbar\ToolBar\SearchquDx.dll () O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O2 - BHO: (no name) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No CLSID value found. O3:64bit: - HKLM…\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM…\Toolbar: (Searchqu Toolbar) - {7FF99715-3016-4381-84CE-E4E4C9673020} - C:\Program Files (x86)\Windows Searchqu Toolbar\ToolBar\SearchquDx.dll () O3 - HKLM…\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM…\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (no name) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O4 - HKLM…\Run: [Readar_sl] C:\Users\Maciej\AppData\Roaming\Readar_sl.exe (Created with WinAutomation (http://www.WinAutomation.com)) O4 - HKLM…\Run: [TunesHelper] C:\ProgramData\TunesHelper.exe () O4 - HKCU…\Run: [] File not found :Commands [emptytemp]

Kliknij Wykonaj skrypt…Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, tym razem kliknij (Skanuj).

Pokaż nowy log OTL.txt oraz raport z usuwania.

Odinstaluj Ask Toolbar,Windows Searchqu Toolbar.

cybul92 · 7 Czerwiec 2011 16:09

Pomogło, dziękuje bardzo.

Leon1 · 8 Czerwiec 2011 14:44