Skocz do zawartości
  • 👋 Witaj na MPCForum!

    Przeglądasz forum jako gość, co oznacza, że wiele świetnych funkcji jest jeszcze przed Tobą! 😎

    • Pełny dostęp do działów i ukrytych treści
    • Możliwość pisania i odpowiadania w tematach
    • System prywatnych wiadomości
    • Zbieranie reputacji i rozwijanie swojego profilu
    • Członkostwo w jednej z największych społeczności graczy

    👉 Dołączenie zajmie Ci mniej niż minutę – a zyskasz znacznie więcej!

    Zarejestruj się teraz

LAGI


MaminSynek

Rekomendowane odpowiedzi

Opublikowano

Witam mam dość dobry komputer z Windows 7 ale wczoraj zaczął się cholernie zawieszać nie wiem co się dzieje wyczyściłem go CCleaner ale nic Przeszukałem cały rejestr programem Uniblue Registry Booster nic powiedzie co mam robić Mozilla cały czas pluje i ogólnie cały systempost-575547-0-84725800-1336079883_thumb.png Brakiem Odpowiedzi mi już ręce opadają co się dzieje z tym PC

 

Specyfikacja starszego komputera bo tamten się doszczętnie spalił

 

AMD Athlon? 7750 2x2.71GHz

GeForce 9400 GT 512mb po Overcloking

DYSK 320GB

Windows 7

2GB RAM

 

Wrazie czego napiszcie co mam jeszcze podać proszę o jak najszybsze odpowiedzi ponieważ boje się żę zostanę bez komputera

 

Zegary karty podam bo może za wysoko podkręciłem i przegrzewanie jest powodem no nie wiem mam pustkę we łbie

graphic.png

Opublikowano

Przeskanuj komputer antywirem ,defragmentuj tym :

http://www.dobreprogramy.pl/Auslogics-Disk-Defrag,Program,Windows,13271.html

 

Zobacz np. ile ram. przypada na komp.

Hue

Opublikowano

spróbuj go wyczyścyć może się przgrzewa a najlepiej będzie jak przeinstalujesz system - kopia najważniejszych danych i piratów

Opublikowano

Odsyłam, bez logów nic nie wykombinujemy ;)

http://www.mpcforum....-zalozyc-temat/

Nic nie wniosłeś do tematu

 

spróbuj go wyczyścyć może się przgrzewa a najlepiej będzie jak przeinstalujesz system - kopia najważniejszych danych i piratów

O stary wiesz ile rzeczy bym musiał skopiować :P a poza tym niew posiadam pirackich plików prócz Windows ale właściwie Windows też jest ogryginalny bo mi wujek wpisał swój klucz

graphic.png

Opublikowano

Nic nie wniosłeś do tematu

Wniósł. Może masz wirusa, a z logów da się tego dowiedzieć.

Wszyscy się chwalą, to i ja się pochwalę:

 

PC:
  CPU: 
Intel Core i7 6700K @ 4.5GHz
  COOLER: SilentiumPC Fortis 3 v2
  MOBO: MSI Z170A-G43 Plus
  RAM: 2x8GB HyperX Fury Black 2400MHz CL15
  GPU: Palit nVidia GeForce GTX1070 JetStream @ 2012MHz/4004MHz
  AUDIO: AIM SC808
  SSD: Goodram Iridium Pro 240GB
  HDD: Western Digital Caviar Blue 1TB 
  PSU: SilentiumPC Enduro FM1 550W
  CASE: SilentiumPC Pax M70 Pure Black v2
  OS: Windows 10 Pro 64bit

PERYFERIA:
  Monitor: 
Eizo EV2450
  Audio: Technics SA-AX540 + Altus 110 (modyfikowane) + Superlux HD681EVO + Brainwavz M1
  Klawiatura: SPC Gear GK530 RGB Kalih Brown
  Mysz: A4Tech Bloody Blazing A90
  Podkładka: A4Tech Bloody B-081 
  Gamepad: Microsoft Xbox One Wireless Controller + Asus BT400
  Drukarka: Brother MFC-7460DN
  Kamerka: Logitech C270

LAPTOP:
  Model: 
Lenovo ThinkPad X230
  CPU: Intel Core i5 3210M @ 2,5GHz
  GPU: Intel HD4000
  RAM: 2x4GB Samsung 1600MHz
  SSD: Samsung PM830 128GB
  SCREEN: 1366x768 IPS, matowy
  3G: Ericsson H5321 gw
  BATTERY: Lenovo 9 Cell Extended Life Battery 44++

 
Opublikowano

Nawet nie zajrzałeś do tego tematu, który Ci podał... OTL.

Wszyscy się chwalą, to i ja się pochwalę:

 

PC:
  CPU: 
Intel Core i7 6700K @ 4.5GHz
  COOLER: SilentiumPC Fortis 3 v2
  MOBO: MSI Z170A-G43 Plus
  RAM: 2x8GB HyperX Fury Black 2400MHz CL15
  GPU: Palit nVidia GeForce GTX1070 JetStream @ 2012MHz/4004MHz
  AUDIO: AIM SC808
  SSD: Goodram Iridium Pro 240GB
  HDD: Western Digital Caviar Blue 1TB 
  PSU: SilentiumPC Enduro FM1 550W
  CASE: SilentiumPC Pax M70 Pure Black v2
  OS: Windows 10 Pro 64bit

PERYFERIA:
  Monitor: 
Eizo EV2450
  Audio: Technics SA-AX540 + Altus 110 (modyfikowane) + Superlux HD681EVO + Brainwavz M1
  Klawiatura: SPC Gear GK530 RGB Kalih Brown
  Mysz: A4Tech Bloody Blazing A90
  Podkładka: A4Tech Bloody B-081 
  Gamepad: Microsoft Xbox One Wireless Controller + Asus BT400
  Drukarka: Brother MFC-7460DN
  Kamerka: Logitech C270

LAPTOP:
  Model: 
Lenovo ThinkPad X230
  CPU: Intel Core i5 3210M @ 2,5GHz
  GPU: Intel HD4000
  RAM: 2x4GB Samsung 1600MHz
  SSD: Samsung PM830 128GB
  SCREEN: 1366x768 IPS, matowy
  3G: Ericsson H5321 gw
  BATTERY: Lenovo 9 Cell Extended Life Battery 44++

 
Opublikowano

To wrzuć je na Wklej.to np i linki do wklejki tylko podaj .

 

Może nie lepiej więcej ramu dokupić i bd już system sprawniejszy??

 

@

Wina lagów może być spowodowana Ilością wirusów na komputerze

Opublikowano

Wklej tekst w Code i wsadź w spoilery...

Wszyscy się chwalą, to i ja się pochwalę:

 

PC:
  CPU: 
Intel Core i7 6700K @ 4.5GHz
  COOLER: SilentiumPC Fortis 3 v2
  MOBO: MSI Z170A-G43 Plus
  RAM: 2x8GB HyperX Fury Black 2400MHz CL15
  GPU: Palit nVidia GeForce GTX1070 JetStream @ 2012MHz/4004MHz
  AUDIO: AIM SC808
  SSD: Goodram Iridium Pro 240GB
  HDD: Western Digital Caviar Blue 1TB 
  PSU: SilentiumPC Enduro FM1 550W
  CASE: SilentiumPC Pax M70 Pure Black v2
  OS: Windows 10 Pro 64bit

PERYFERIA:
  Monitor: 
Eizo EV2450
  Audio: Technics SA-AX540 + Altus 110 (modyfikowane) + Superlux HD681EVO + Brainwavz M1
  Klawiatura: SPC Gear GK530 RGB Kalih Brown
  Mysz: A4Tech Bloody Blazing A90
  Podkładka: A4Tech Bloody B-081 
  Gamepad: Microsoft Xbox One Wireless Controller + Asus BT400
  Drukarka: Brother MFC-7460DN
  Kamerka: Logitech C270

LAPTOP:
  Model: 
Lenovo ThinkPad X230
  CPU: Intel Core i5 3210M @ 2,5GHz
  GPU: Intel HD4000
  RAM: 2x4GB Samsung 1600MHz
  SSD: Samsung PM830 128GB
  SCREEN: 1366x768 IPS, matowy
  3G: Ericsson H5321 gw
  BATTERY: Lenovo 9 Cell Extended Life Battery 44++

 
Opublikowano

To wrzuć je na Wklej.to np i linki do wklejki tylko podaj .

 

Może nie lepiej więcej ramu dokupić i bd już system sprawniejszy??

 

@

Wina lagów może być spowodowana Ilością wirusów na komputerze

Ram ? Jeżeli tak to mi sam dokup :) Nie wszyscy majuą kase na podzespoły ja wole naprzykład się w co ubrać albo coś zejść

 

Wklej tekst w Code i wsadź w spoilery...

 

 

 

 

OTL logfile created on: 2012-05-04 14:23:06 - Run 1

OTL by OldTimer - Version 3.2.42.2 Folder = E:\Users\Adam\Desktop

Professional (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd

 

2,00 Gb Total Physical Memory | 1,16 Gb Available Physical Memory | 57,80% Memory free

5,00 Gb Paging File | 3,95 Gb Available in Paging File | 79,11% Paging File free

Paging file location(s): e:\pagefile.sys 3070 4080 [binary data]

 

%SystemDrive% = E: | %SystemRoot% = E:\Windows | %ProgramFiles% = E:\Program Files

Drive C: | 32,14 Gb Total Space | 19,65 Gb Free Space | 61,14% Space Free | Partition Type: NTFS

Drive D: | 82,90 Gb Total Space | 13,74 Gb Free Space | 16,57% Space Free | Partition Type: NTFS

Drive E: | 85,39 Gb Total Space | 30,90 Gb Free Space | 36,19% Space Free | Partition Type: NTFS

Drive F: | 97,65 Gb Total Space | 7,34 Gb Free Space | 7,52% Space Free | Partition Type: NTFS

Drive G: | 651,49 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

 

Computer Name: ADAM-PC | User Name: Adam | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 

========== Processes (SafeList) ==========

 

PRC - [2012-05-04 13:07:31 | 000,595,456 | ---- | M] (OldTimer Tools) -- E:\Users\Adam\Desktop\OTL.exe

PRC - [2012-05-03 05:01:27 | 000,924,600 | ---- | M] (Mozilla Corporation) -- E:\Program Files\Mozilla Firefox\firefox.exe

PRC - [2012-04-28 11:29:58 | 008,674,800 | ---- | M] (TeamSpeak Systems GmbH) -- E:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe

PRC - [2012-04-01 11:56:28 | 000,025,984 | ---- | M] (Uniblue Systems Limited) -- E:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe

PRC - [2011-12-27 03:19:25 | 001,693,112 | ---- | M] (MusicLab, LLC) -- E:\Program Files\BearShare Applications\MediaBar\Datamngr\datamngrUI.exe

PRC - [2011-10-15 01:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) -- E:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

PRC - [2011-10-15 01:53:00 | 001,328,960 | ---- | M] (NVIDIA Corporation) -- E:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

PRC - [2011-02-24 22:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- E:\Windows\explorer.exe

PRC - [2010-11-20 05:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\taskhost.exe

PRC - [2009-07-13 18:14:26 | 006,376,960 | ---- | M] (Microsoft Corporation) -- E:\Windows\System32\mspaint.exe

PRC - [2007-09-02 13:58:52 | 000,495,616 | ---- | M] () -- E:\Program Files\RocketDock\RocketDock.exe

PRC - [2006-09-19 09:07:28 | 000,827,392 | ---- | M] () -- E:\Windows\vsnpstd3.exe

 

 

========== Modules (No Company Name) ==========

 

MOD - [2012-05-04 12:45:29 | 008,797,856 | ---- | M] () -- E:\Windows\System32\Macromed\Flash\NPSWF32_11_2_202_235.dll

MOD - [2012-05-03 05:01:27 | 001,952,696 | ---- | M] () -- E:\Program Files\Mozilla Firefox\mozjs.dll

MOD - [2012-04-28 11:29:58 | 000,232,944 | ---- | M] () -- E:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win32.dll

MOD - [2012-04-28 11:29:57 | 000,422,896 | ---- | M] () -- E:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll

MOD - [2012-04-28 11:29:57 | 000,230,384 | ---- | M] () -- E:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win32.dll

MOD - [2012-04-28 11:29:57 | 000,159,216 | ---- | M] () -- E:\Program Files\TeamSpeak 3 Client\plugins\appscanner_plugin.dll

MOD - [2011-10-15 01:54:26 | 000,265,536 | ---- | M] () -- E:\Program Files\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll

MOD - [2011-03-18 08:51:44 | 007,859,200 | ---- | M] () -- E:\Program Files\TeamSpeak 3 Client\QtGui4.dll

MOD - [2011-03-18 08:51:44 | 002,210,816 | ---- | M] () -- E:\Program Files\TeamSpeak 3 Client\QtCore4.dll

MOD - [2011-03-18 08:51:44 | 000,814,080 | ---- | M] () -- E:\Program Files\TeamSpeak 3 Client\QtNetwork4.dll

MOD - [2011-03-18 08:51:44 | 000,195,584 | ---- | M] () -- E:\Program Files\TeamSpeak 3 Client\imageformats\qjpeg4.dll

MOD - [2011-03-18 08:51:44 | 000,025,600 | ---- | M] () -- E:\Program Files\TeamSpeak 3 Client\imageformats\qgif4.dll

MOD - [2007-09-02 13:58:52 | 000,495,616 | ---- | M] () -- E:\Program Files\RocketDock\RocketDock.exe

MOD - [2007-09-02 13:57:36 | 000,069,632 | ---- | M] () -- E:\Program Files\RocketDock\RocketDock.dll

MOD - [2006-09-19 09:07:28 | 000,827,392 | ---- | M] () -- E:\Windows\vsnpstd3.exe

 

 

========== Win32 Services (SafeList) ==========

 

SRV - File not found [Auto | Stopped] -- -- (HiPatchService)

SRV - File not found [On_Demand | Stopped] -- -- (gusvc)

SRV - File not found [Auto | Stopped] -- -- (avast! Antivirus)

SRV - [2012-05-04 12:45:29 | 000,257,696 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- E:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2012-05-03 05:01:27 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- E:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2012-02-29 08:50:48 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- E:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)

SRV - [2011-10-15 01:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- E:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)

SRV - [2011-04-26 00:49:11 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- E:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)

SRV - [2011-03-01 19:29:58 | 000,130,976 | ---- | M] (Futuremark Corporation) [On_Demand | Stopped] -- E:\Program Files\Futuremark\Futuremark SystemInfo\FMSISvc.exe -- (Futuremark SystemInfo Service)

SRV - [2009-07-13 18:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- E:\Windows\System32\StorSvc.dll -- (StorSvc)

SRV - [2009-07-13 18:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- E:\Windows\System32\sensrsvc.dll -- (SensrSvc)

SRV - [2009-07-13 18:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- E:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)

SRV - [2009-07-13 18:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- E:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

 

 

========== Driver Services (SafeList) ==========

 

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (XDva397)

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (XDva394)

DRV - File not found [Kernel | System | Stopped] -- -- (aswTdi)

DRV - File not found [Kernel | System | Stopped] -- -- (aswSP)

DRV - File not found [File_System | System | Stopped] -- -- (aswSnx)

DRV - File not found [Kernel | System | Stopped] -- -- (aswRdr)

DRV - File not found [File_System | Auto | Stopped] -- -- (aswMonFlt)

DRV - File not found [File_System | Auto | Stopped] -- -- (aswFsBlk)

DRV - [2012-03-30 16:07:08 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- E:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)

DRV - [2011-10-15 01:53:00 | 010,327,360 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- E:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)

DRV - [2010-11-20 05:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- E:\Windows\System32\drivers\vmbus.sys -- (vmbus)

DRV - [2010-11-20 05:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- E:\Windows\System32\drivers\vmstorfl.sys -- (storflt)

DRV - [2010-11-20 05:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- E:\Windows\System32\drivers\storvsc.sys -- (storvsc)

DRV - [2010-11-20 02:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- E:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)

DRV - [2010-11-20 02:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- E:\Windows\System32\drivers\vms3cap.sys -- (s3cap)

DRV - [2009-08-22 11:25:00 | 000,009,088 | ---- | M] () [Kernel | On_Demand | Running] -- E:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner32.sys -- (RivaTuner32)

DRV - [2009-07-13 15:02:52 | 000,347,264 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- E:\Windows\System32\drivers\nvm62x32.sys -- (NVENETFD)

DRV - [2009-05-01 22:06:56 | 000,287,008 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- E:\Windows\System32\drivers\nvmf6232.sys -- (NVNET)

DRV - [2009-03-18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- E:\Windows\System32\drivers\hamachi.sys -- (hamachi)

DRV - [2007-03-27 18:19:36 | 010,252,544 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand | Stopped] -- E:\Windows\System32\drivers\snpstd3.sys -- (SNPSTD3) USB PC Camera (SNPSTD3)

DRV - [2004-08-13 09:56:20 | 000,005,810 | ---- | M] () [Kernel | On_Demand | Running] -- E:\Windows\System32\drivers\ASACPI.sys -- (MTsensor)

 

 

========== Standard Registry (SafeList) ==========

 

 

========== Internet Explorer ==========

 

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank

IE - HKLM\..\URLSearchHook: {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - No CLSID value found

IE - HKLM\..\URLSearchHook: {8f3c1d75-d467-43c2-9a36-655366b76f5f} - No CLSID value found

IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7

IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3031818

IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = E0 B9 3D BA 56 03 CC 01 [binary data]

IE - HKCU\..\URLSearchHook: {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - No CLSID value found

IE - HKCU\..\URLSearchHook: {8f3c1d75-d467-43c2-9a36-655366b76f5f} - No CLSID value found

IE - HKCU\..\URLSearchHook: {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - No CLSID value found

IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC

IE - HKCU\..\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}: "URL" = http://start.facemoods.com/?a=ddr&s={searchTerms}&f=4

IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/web/{searchTerms}?babsrc=browsersearch&AF=100581

IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7

IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={CE76B977-134F-4F7E-B8B5-AC55C2DE7746}&mid=1a3b95b07ebf47d19af4d16dca38ed02-fb10d78b46ae8addd99e090b3f625181e0e463ce?=pl&ds=is015&pr=sa&d=2012-01-26 21:07:50&v=9.0.0.23&sap=dsp&q={searchTerms}

IE - HKCU\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://www.daemon-search.com/search?q={searchTerms}

IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3031818

IE - HKCU\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = proxypl1:8080

 

========== FireFox ==========

 

FF - prefs.js..browser.search.defaultenginename: "Search Results"

FF - prefs.js..browser.search.defaultthis.engineName: "SFT_Polska_ Customized Web Search"

FF - prefs.js..browser.search.defaulturl: "http://www.bing.com/search?FORM=WLETDF&PC=WLEM&q="

FF - prefs.js..browser.search.order.1: "Search Results"

FF - prefs.js..browser.search.selectedEngine: "Google"

FF - prefs.js..browser.search.useDBForOrder: true

FF - prefs.js..browser.startup.homepage: "http://search.bearshare.com"

FF - prefs.js..extensions.enabledItems: [email protected]:6.0.1289

FF - prefs.js..extensions.enabledItems: {9c51bd27-6ed8-4000-a2bf-36cb95c0c947}:11.0.1

FF - prefs.js..extensions.enabledItems: {5e5ab302-7f65-44cd-8211-c1d4caaccea3}:3.6.0.10

FF - prefs.js..extensions.enabledItems: {8f3c1d75-d467-43c2-9a36-655366b76f5f}:3.6.0.10

FF - prefs.js..extensions.enabledItems: [email protected]:1.2.1

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}:7.0

FF - prefs.js..extensions.enabledItems: {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.7.0.8524

FF - prefs.js..keyword.URL: "http://dts.search-results.com/sr?src=ffb&appid=0&systemid=2&sr=0&q="

FF - user.js - File not found

 

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: E:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: E:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: E:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)

FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.110.0: E:\Program Files\Battlelog Web Plugins\1.110.0\npesnlaunch.dll File not found

FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.118.0: E:\Program Files\Battlelog Web Plugins\1.118.0\npesnlaunch.dll (ESN Social Software AB)

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: E:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.3.1: E:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.3.1: E:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: e:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: E:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: E:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: E:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: E:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: E:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: E:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: E:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.0: E:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: E:\Users\Adam\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: E:\Users\Adam\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: E:\Users\Adam\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: E:\Program Files\Mozilla Firefox\components [2012-05-03 05:01:27 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: E:\Program Files\Mozilla Firefox\plugins

 

[2012-04-05 04:23:08 | 000,000,000 | ---D | M] (No name found) -- E:\Users\Adam\AppData\Roaming\Mozilla\Extensions

[2012-05-03 12:51:28 | 000,000,000 | ---D | M] (No name found) -- E:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\tf7wztf0.default\extensions

[2012-05-03 12:51:28 | 000,000,000 | ---D | M] (XfireXO Community Toolbar) -- E:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\tf7wztf0.default\extensions\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}

[2012-04-28 14:44:07 | 000,000,000 | ---D | M] (SFT_Polska_ Community Toolbar) -- E:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\tf7wztf0.default\extensions\{8f3c1d75-d467-43c2-9a36-655366b76f5f}

[2011-08-17 14:06:23 | 000,000,000 | ---D | M] (Tamper Data) -- E:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\tf7wztf0.default\extensions\{9c51bd27-6ed8-4000-a2bf-36cb95c0c947}

[2012-04-05 04:22:58 | 000,000,000 | ---D | M] (Wincore Mediabar) -- E:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\tf7wztf0.default\extensions\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}

[2012-03-30 13:13:46 | 000,000,000 | ---D | M] (Battlefield Heroes Updater) -- E:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\tf7wztf0.default\extensions\[email protected]

[2011-09-01 16:22:37 | 000,000,000 | ---D | M] (Facemoods) -- E:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\tf7wztf0.default\extensions\[email protected]

[2011-11-18 16:03:22 | 000,001,832 | ---- | M] () -- E:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\tf7wztf0.default\searchplugins\bing.xml

[2011-08-01 15:59:20 | 000,000,925 | ---- | M] () -- E:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\tf7wztf0.default\searchplugins\conduit.xml

[2012-04-05 04:22:48 | 000,002,511 | ---- | M] () -- E:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\tf7wztf0.default\searchplugins\Search_Results.xml

[2012-04-28 14:20:21 | 000,000,000 | ---D | M] (No name found) -- E:\Program Files\Mozilla Firefox\extensions

[2011-10-30 05:57:47 | 000,000,000 | ---D | M] (Skype Click to Call) -- E:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

() (No name found) -- E:\USERS\ADAM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\TF7WZTF0.DEFAULT\EXTENSIONS\{46551EC9-40F0-4E47-8E18-8E5CF550CFB8}.XPI

[2012-05-03 05:01:27 | 000,097,208 | ---- | M] (Mozilla Foundation) -- E:\Program Files\mozilla firefox\components\browsercomps.dll

[2012-03-12 22:36:36 | 000,002,767 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml

[2012-01-30 08:42:02 | 000,003,768 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml

[2011-08-13 21:34:11 | 000,002,227 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\babylon.xml

[2012-03-12 22:36:36 | 000,001,406 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml

[2010-12-13 05:36:54 | 000,002,035 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\fcmdSrchddr.xml

[2012-03-12 22:36:36 | 000,000,917 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml

[2012-03-12 22:36:36 | 000,000,858 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml

[2012-04-05 04:22:48 | 000,002,511 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\Search_Results.xml

[2012-03-12 22:36:36 | 000,001,183 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml

[2012-03-12 22:36:36 | 000,001,683 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\wp-pl.xml

 

========== Chrome ==========

 

CHR - default_search_provider: Google (Enabled)

CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}

CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}

CHR - plugin: Shockwave Flash (Enabled) = E:\Users\Adam\AppData\Local\Google\Chrome\Application\18.0.1025.168\gcswf32.dll

CHR - plugin: Shockwave Flash (Enabled) = E:\Windows\system32\Macromed\Flash\NPSWF32.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = E:\Program Files\QuickTime\plugins\npqtplugin.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = E:\Program Files\QuickTime\plugins\npqtplugin2.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = E:\Program Files\QuickTime\plugins\npqtplugin3.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = E:\Program Files\QuickTime\plugins\npqtplugin4.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = E:\Program Files\QuickTime\plugins\npqtplugin5.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = E:\Program Files\QuickTime\plugins\npqtplugin6.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = E:\Program Files\QuickTime\plugins\npqtplugin7.dll

CHR - plugin: Silverlight Plug-In (Enabled) = E:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

CHR - plugin: Shockwave for Director (Enabled) = E:\Windows\system32\Adobe\Director\np32dsw.dll

CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer

CHR - plugin: Native Client (Enabled) = E:\Users\Adam\AppData\Local\Google\Chrome\Application\18.0.1025.168\ppGoogleNaClPluginChrome.dll

CHR - plugin: Chrome PDF Viewer (Enabled) = E:\Users\Adam\AppData\Local\Google\Chrome\Application\18.0.1025.168\pdf.dll

CHR - plugin: Battlefield Play4Free Updater (Enabled) = E:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkejhbcdagodjdndmfnhaibnealjonei\1.0.53.2_0\npBP4FUpdater.dll

CHR - plugin: Battlefield Play4Free Updater (Enabled) = E:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkejhbcdagodjdndmfnhaibnealjonei\1.0.53.2_0\BP4FUpdater.exe

CHR - plugin: Skype Toolbars (Enabled) = E:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.5.0.8013_0\npSkypeChromePlugin.dll

CHR - plugin: Java Deployment Toolkit 7.0.0.139 (Enabled) = E:\Program Files\Java\jre7\bin\new_plugin\npdeployJava1.dll

CHR - plugin: Java Platform SE 7 (Enabled) = E:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll

CHR - plugin: Google Earth Plugin (Enabled) = E:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

CHR - plugin: Google Update (Enabled) = E:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll

CHR - plugin: Pando Web Plugin (Enabled) = E:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = E:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

CHR - plugin: Default Plug-in (Enabled) = default_plugin

CHR - Extension: Battlefield Play4Free = E:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkejhbcdagodjdndmfnhaibnealjonei\1.0.53.2_0\

CHR - Extension: Skype Click to Call = E:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\

 

O1 HOSTS File: ([2009-06-10 14:39:37 | 000,000,824 | ---- | M]) - E:\Windows\System32\drivers\etc\hosts

O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - E:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O2 - BHO: (DataMngr) - {B939CF93-F2CB-443d-956C-DC523D85C9DB} - E:\Program Files\BearShare Applications\MediaBar\Datamngr\BrowserConnection.dll (MusicLab, LLC)

O2 - BHO: (Wincore Mediabar) - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - E:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll ()

O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll (Oracle Corporation)

O3 - HKLM\..\Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.

O3 - HKLM\..\Toolbar: (no name) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - No CLSID value found.

O3 - HKLM\..\Toolbar: (no name) - {8f3c1d75-d467-43c2-9a36-655366b76f5f} - No CLSID value found.

O3 - HKLM\..\Toolbar: (Wincore Mediabar) - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - E:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll ()

O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.

O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.

O4 - HKLM..\Run: [DATAMNGR] E:\Program Files\BearShare Applications\MediaBar\Datamngr\datamngrUI.exe (MusicLab, LLC)

O4 - HKLM..\Run: [NvCplDaemon] E:\Windows\System32\NvCpl.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [RivaTuner] E:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTunerWrapper.exe ()

O4 - HKLM..\Run: [RivaTunerStartupDaemon] E:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTunerWrapper.exe ()

O4 - HKLM..\Run: [ROC_roc_dec12] E:\Program Files\AVG Secure Search\ROC_roc_dec12.exe ()

O4 - HKLM..\Run: [RTSS] E:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\Tools\RTSS\RTSSWrapper.exe ()

O4 - HKLM..\Run: [snpstd3] E:\Windows\vsnpstd3.exe ()

O4 - HKCU..\Run: [DAEMON Tools Lite] E:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)

O4 - HKCU..\Run: [RocketDock] E:\Program Files\RocketDock\RocketDock.exe ()

O4 - HKCU..\Run: [steam] F:\Program Files\Nowy folder (2)\steam.exe (Valve Corporation)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - E:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - E:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O13 - gopher Prefix: missing

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 10.3.1)

O16 - DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03)

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 217.113.224.36 217.113.224.134

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5959CD35-66A7-4094-9D2C-C19E1F8B7A57}: DhcpNameServer = 217.113.224.36 217.113.224.134

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - E:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - E:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O20 - AppInit_DLLs: (E:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\datamngr.dll) - E:\Program Files\BearShare Applications\MediaBar\Datamngr\datamngr.dll (MusicLab, LLC)

O20 - AppInit_DLLs: (E:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\IEBHO.dll) - E:\Program Files\BearShare Applications\MediaBar\Datamngr\IEBHO.dll (MusicLab, LLC)

O20 - HKLM Winlogon: Shell - (explorer.exe) - E:\Windows\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (E:\Windows\system32\userinit.exe) - E:\Windows\System32\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - E:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)

O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2011-01-27 14:38:21 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O32 - AutoRun File - [2009-06-10 14:42:20 | 000,000,024 | ---- | M] () - E:\autoexec.bat -- [ NTFS ]

O32 - AutoRun File - [2006-01-27 09:02:52 | 000,000,030 | R--- | M] () - G:\autorun.inf -- [ CDFS ]

O33 - MountPoints2\{001bb8ea-72f7-11e0-b989-00248cdc04f1}\Shell - "" = AutoRun

O33 - MountPoints2\{001bb8ea-72f7-11e0-b989-00248cdc04f1}\Shell\AutoRun\command - "" = H:\autorun.exe

O33 - MountPoints2\{1d6bb6e1-d647-11e0-ba68-00248cdc04f1}\Shell - "" = AutoRun

O33 - MountPoints2\{1d6bb6e1-d647-11e0-ba68-00248cdc04f1}\Shell\AutoRun\command - "" = L:\AUTORUN.EXE

O33 - MountPoints2\{2a156219-b0f2-11e0-9b99-00248cdc04f1}\Shell - "" = AutoRun

O33 - MountPoints2\{2a156219-b0f2-11e0-9b99-00248cdc04f1}\Shell\AutoRun\command - "" = L:\cdstart.exe

O33 - MountPoints2\{2a15621c-b0f2-11e0-9b99-00248cdc04f1}\Shell - "" = AutoRun

O33 - MountPoints2\{2a15621c-b0f2-11e0-9b99-00248cdc04f1}\Shell\AutoRun\command - "" = M:\cdstart.exe

O33 - MountPoints2\{3fff758b-6fab-11e0-9795-806e6f6e6963}\Shell - "" = AutoRun

O33 - MountPoints2\{3fff758b-6fab-11e0-9795-806e6f6e6963}\Shell\AutoRun\command - "" = G:\PCFormat.exe -- [2008-01-24 04:16:12 | 002,199,040 | R--- | M] ()

O33 - MountPoints2\G\Shell - "" = AutoRun

O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\Autorun.exe

O33 - MountPoints2\H\Shell - "" = AutoRun

O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\autorun.exe

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 

========== Files/Folders - Created Within 30 Days ==========

 

[2012-05-04 13:21:36 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID

[2012-05-04 13:21:33 | 000,024,328 | ---- | C] (CPUID) -- E:\Windows\System32\drivers\cpuz135_x32.sys

[2012-05-04 13:21:07 | 000,000,000 | ---D | C] -- E:\Program Files\CPUID

[2012-05-04 13:03:44 | 000,595,456 | ---- | C] (OldTimer Tools) -- E:\Users\Adam\Desktop\OTL.exe

[2012-05-03 11:38:56 | 010,299,264 | ---- | C] (Microsoft Corporation) -- E:\Users\Adam\Desktop\mseinstall.exe

[2012-05-03 07:52:53 | 000,000,000 | ---D | C] -- E:\ProgramData\35267

[2012-05-03 05:01:35 | 000,000,000 | ---D | C] -- E:\Program Files\Mozilla Maintenance Service

[2012-05-03 05:01:35 | 000,000,000 | ---D | C] -- E:\ProgramData\Mozilla

[2012-04-28 14:55:34 | 000,000,000 | ---D | C] -- E:\tmp

[2012-04-28 14:48:33 | 000,000,000 | ---D | C] -- E:\New folder

[2012-04-28 14:41:49 | 000,000,000 | ---D | C] -- E:\Users\Adam\AppData\Roaming\Blender Foundation

[2012-04-28 14:37:51 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blender Foundation

[2012-04-28 14:19:30 | 000,000,000 | ---D | C] -- E:\Users\Adam\AppData\Local\SlimWare Utilities Inc

[2012-04-28 14:19:10 | 000,000,000 | ---D | C] -- E:\Program Files\SlimComputer

[2012-04-28 14:19:03 | 000,000,000 | ---D | C] -- E:\Users\Public\Documents\Downloaded Installers

[2012-04-28 14:12:46 | 000,000,000 | ---D | C] -- E:\Users\Adam\AppData\Roaming\vlc

[2012-04-28 14:12:37 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

[2012-04-28 14:12:04 | 000,000,000 | ---D | C] -- E:\Program Files\VideoLAN

[2012-04-28 13:42:50 | 000,000,000 | R--D | C] -- E:\Users\Adam\Desktop\Inne

[2012-04-28 13:42:48 | 000,000,000 | R--D | C] -- E:\Users\Adam\Desktop\Gry

[2012-04-28 13:41:47 | 000,000,000 | R--D | C] -- E:\Users\Adam\Desktop\Zdjęcia i Filmy

[2012-04-28 07:53:57 | 000,000,000 | ---D | C] -- E:\Users\Adam\Documents\Eidos

[2012-04-28 05:10:34 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

[2012-04-28 05:10:34 | 000,000,000 | ---D | C] -- E:\Program Files\Common Files\Skype

[2012-04-27 06:44:54 | 000,000,000 | ---D | C] -- E:\Users\Adam\AppData\Roaming\TuneUp Software

[2012-04-27 06:44:15 | 000,000,000 | ---D | C] -- E:\ProgramData\TuneUp Software

[2012-04-27 06:43:29 | 000,000,000 | -HSD | C] -- E:\ProgramData\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}

[2012-04-25 10:15:36 | 000,000,000 | ---D | C] -- E:\Users\Adam\Documents\FIFA MANAGER 12 Demo

[2012-04-24 10:30:29 | 000,000,000 | ---D | C] -- E:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameShadow

[2012-04-24 10:30:25 | 000,000,000 | ---D | C] -- E:\Users\Adam\Documents\GameShadow

[2012-04-24 10:30:14 | 000,000,000 | ---D | C] -- E:\Users\Adam\AppData\Local\Downloaded Installations

[2012-04-24 10:27:33 | 000,000,000 | ---D | C] -- E:\Program Files\Championship Manager 2008

[2012-04-23 11:05:45 | 000,419,488 | ---- | C] (Adobe Systems Incorporated) -- E:\Windows\System32\FlashPlayerApp.exe

[2012-04-22 00:46:45 | 000,000,000 | ---D | C] -- E:\Users\Adam\AppData\Local\Unity

[2012-04-17 16:40:50 | 000,000,000 | ---D | C] -- E:\Users\Adam\AppData\Roaming\BitTorrent

[2012-04-17 16:40:42 | 000,000,000 | ---D | C] -- E:\Program Files\v9Soft

[2012-04-17 16:28:41 | 000,000,000 | ---D | C] -- E:\Users\Adam\AppData\Roaming\uTorrent

[2012-04-14 23:31:27 | 000,000,000 | ---D | C] -- E:\Users\Adam\AppData\Local\DarkManager

[2012-04-13 14:46:58 | 002,382,848 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\mshtml.tlb

[2012-04-13 14:46:57 | 001,799,168 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\jscript9.dll

[2012-04-13 14:46:56 | 000,065,024 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\jsproxy.dll

[2012-04-13 14:46:55 | 000,231,936 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\url.dll

[2012-04-13 14:46:55 | 000,176,640 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieui.dll

[2012-04-13 14:46:53 | 001,427,456 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\inetcpl.cpl

[2012-04-11 06:03:33 | 000,000,000 | -H-D | C] -- E:\ProgramData\{6AD8E59C-250C-4201-B5BA-56ADEF76FF46}

[2012-04-11 06:03:33 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue

[2012-04-11 06:03:33 | 000,000,000 | ---D | C] -- E:\Program Files\Uniblue

[2012-04-09 12:41:49 | 000,000,000 | ---D | C] -- E:\Program Files\7-Zip

[2012-04-06 08:00:15 | 000,000,000 | ---D | C] -- E:\Program Files\GameSpy Arcade

[2012-04-05 04:22:49 | 000,000,000 | ---D | C] -- E:\ProgramData\boost_interprocess

[2012-04-05 04:22:33 | 000,000,000 | ---D | C] -- E:\Users\Adam\Documents\My Received Files

[2012-04-05 04:22:32 | 000,000,000 | ---D | C] -- E:\Users\Adam\AppData\Local\BearShare

[2012-04-05 04:15:14 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\BearShare

[2012-04-05 04:15:13 | 000,000,000 | ---D | C] -- E:\ProgramData\BearShare

[2012-04-05 04:15:12 | 000,000,000 | ---D | C] -- E:\Program Files\BearShare Applications

[2012-04-05 04:13:55 | 000,000,000 | -H-D | C] -- E:\ProgramData\{46F4B6A0-2237-4B58-92A6-75486A36846E}

[2011-08-16 14:42:42 | 000,086,016 | RHS- | C] (LJNCDcjMSQUDlGcLzLKQ) -- E:\Users\Adam\AppData\Roaming\65202007914008.exe

[4 E:\Windows\System32\*.tmp files -> E:\Windows\System32\*.tmp -> ]

[3 E:\Windows\*.tmp files -> E:\Windows\*.tmp -> ]

 

========== Files - Modified Within 30 Days ==========

 

[2012-05-04 13:57:00 | 000,001,054 | ---- | M] () -- E:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3366828089-2319150487-3235724589-1001UA.job

[2012-05-04 13:45:00 | 000,000,830 | ---- | M] () -- E:\Windows\tasks\Adobe Flash Player Updater.job

[2012-05-04 13:40:00 | 000,001,032 | ---- | M] () -- E:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2012-05-04 13:21:52 | 000,001,035 | ---- | M] () -- E:\Users\Public\Desktop\CPUID CPU-Z.lnk

[2012-05-04 13:19:56 | 004,387,080 | ---- | M] ( ) -- E:\Users\Adam\Desktop\cpu-z_1.60.1-setup-en.exe

[2012-05-04 13:07:31 | 000,595,456 | ---- | M] (OldTimer Tools) -- E:\Users\Adam\Desktop\OTL.exe

[2012-05-04 12:45:29 | 000,419,488 | ---- | M] (Adobe Systems Incorporated) -- E:\Windows\System32\FlashPlayerApp.exe

[2012-05-04 12:45:29 | 000,070,304 | ---- | M] (Adobe Systems Incorporated) -- E:\Windows\System32\FlashPlayerCPLApp.cpl

[2012-05-04 11:50:06 | 000,140,800 | ---- | M] () -- E:\Windows\System32\drivers\PnkBstrK.sys

[2012-05-04 11:49:04 | 000,283,304 | ---- | M] () -- E:\Windows\System32\PnkBstrB.xtr

[2012-05-04 11:48:34 | 000,280,904 | ---- | M] () -- E:\Windows\System32\PnkBstrB.ex0

[2012-05-04 10:06:40 | 000,017,312 | -H-- | M] () -- E:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2012-05-04 10:06:30 | 000,017,312 | -H-- | M] () -- E:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2012-05-04 10:00:51 | 000,000,556 | RHS- | M] () -- E:\ProgramData\ntuser.pol

[2012-05-04 10:00:06 | 000,001,028 | ---- | M] () -- E:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2012-05-04 10:00:01 | 000,000,330 | ---- | M] () -- E:\Windows\tasks\RegistryBooster.job

[2012-05-04 09:57:56 | 000,067,584 | --S- | M] () -- E:\Windows\bootstat.dat

[2012-05-04 09:57:49 | 1610,051,584 | -HS- | M] () -- E:\hiberfil.sys

[2012-05-04 01:55:16 | 000,747,764 | ---- | M] () -- E:\Windows\System32\perfh015.dat

[2012-05-04 01:55:16 | 000,715,986 | ---- | M] () -- E:\Windows\System32\perfh013.dat

[2012-05-04 01:55:16 | 000,714,780 | ---- | M] () -- E:\Windows\System32\perfh00C.dat

[2012-05-04 01:55:16 | 000,713,164 | ---- | M] () -- E:\Windows\System32\perfh010.dat

[2012-05-04 01:55:16 | 000,700,142 | ---- | M] () -- E:\Windows\System32\perfh019.dat

[2012-05-04 01:55:16 | 000,669,094 | ---- | M] () -- E:\Windows\System32\perfh007.dat

[2012-05-04 01:55:16 | 000,656,098 | ---- | M] () -- E:\Windows\System32\perfh00E.dat

[2012-05-04 01:55:16 | 000,635,700 | ---- | M] () -- E:\Windows\System32\perfh009.dat

[2012-05-04 01:55:16 | 000,633,604 | ---- | M] () -- E:\Windows\System32\perfh01F.dat

[2012-05-04 01:55:16 | 000,452,828 | ---- | M] () -- E:\Windows\System32\perfh001.dat

[2012-05-04 01:55:16 | 000,164,660 | ---- | M] () -- E:\Windows\System32\perfc00E.dat

[2012-05-04 01:55:16 | 000,151,718 | ---- | M] () -- E:\Windows\System32\perfc015.dat

[2012-05-04 01:55:16 | 000,148,594 | ---- | M] () -- E:\Windows\System32\perfc013.dat

[2012-05-04 01:55:16 | 000,148,462 | ---- | M] () -- E:\Windows\System32\perfc019.dat

[2012-05-04 01:55:16 | 000,145,474 | ---- | M] () -- E:\Windows\System32\perfc007.dat

[2012-05-04 01:55:16 | 000,142,604 | ---- | M] () -- E:\Windows\System32\perfc010.dat

[2012-05-04 01:55:16 | 000,141,640 | ---- | M] () -- E:\Windows\System32\perfc00C.dat

[2012-05-04 01:55:16 | 000,137,174 | ---- | M] () -- E:\Windows\System32\perfc01F.dat

[2012-05-04 01:55:16 | 000,117,638 | ---- | M] () -- E:\Windows\System32\perfc009.dat

[2012-05-04 01:55:16 | 000,090,234 | ---- | M] () -- E:\Windows\System32\perfc001.dat

[2012-05-03 14:16:20 | 000,200,537 | ---- | M] () -- E:\Users\Adam\Desktop\Untitled.png

[2012-05-03 12:06:28 | 000,002,115 | ---- | M] () -- E:\Windows\epplauncher.mif

[2012-05-03 11:42:22 | 010,299,264 | ---- | M] (Microsoft Corporation) -- E:\Users\Adam\Desktop\mseinstall.exe

[2012-05-03 07:57:06 | 000,001,002 | ---- | M] () -- E:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3366828089-2319150487-3235724589-1001Core1cc713c65ca0e0.job

[2012-05-02 05:27:53 | 000,003,288 | ---- | M] () -- E:\bootsqm.dat

[2012-04-28 15:07:01 | 000,331,392 | ---- | M] () -- E:\untitled.blend

[2012-04-28 11:12:06 | 000,414,432 | ---- | M] () -- E:\Windows\System32\FNTCACHE.DAT

[2012-04-28 07:24:17 | 000,002,433 | ---- | M] () -- E:\Users\Adam\AppData\Roaming\PStrip.ini

[2012-04-28 05:29:56 | 000,002,433 | ---- | M] () -- E:\Users\Adam\AppData\Roaming\PStrip.bak

[2012-04-28 05:29:47 | 000,002,414 | ---- | M] () -- E:\Users\Adam\AppData\Roaming\PStrip.bko

[2012-04-28 05:11:57 | 000,002,468 | ---- | M] () -- E:\Users\Adam\AppData\Roaming\PStrip.bk!

[2012-04-24 04:47:59 | 000,000,834 | ---- | M] () -- E:\Users\Adam\.recently-used.xbel

[2012-04-11 06:03:34 | 000,001,752 | ---- | M] () -- E:\Users\Adam\Application Data\Microsoft\Internet Explorer\Quick Launch\Uniblue RegistryBooster.lnk

[2012-04-10 11:47:08 | 004,406,172 | ---- | M] () -- E:\HappyWhels.zip

[2012-04-05 04:15:32 | 000,001,191 | ---- | M] () -- E:\Users\Adam\Application Data\Microsoft\Internet Explorer\Quick Launch\BearShare.lnk

[4 E:\Windows\System32\*.tmp files -> E:\Windows\System32\*.tmp -> ]

[3 E:\Windows\*.tmp files -> E:\Windows\*.tmp -> ]

 

========== Files Created - No Company Name ==========

 

[2012-05-04 13:21:52 | 000,001,035 | ---- | C] () -- E:\Users\Public\Desktop\CPUID CPU-Z.lnk

[2012-05-04 13:16:08 | 004,387,080 | ---- | C] ( ) -- E:\Users\Adam\Desktop\cpu-z_1.60.1-setup-en.exe

[2012-05-03 14:16:20 | 000,200,537 | ---- | C] () -- E:\Users\Adam\Desktop\Untitled.png

[2012-05-02 05:27:53 | 000,003,288 | ---- | C] () -- E:\bootsqm.dat

[2012-04-28 15:07:01 | 000,331,392 | ---- | C] () -- E:\untitled.blend

[2012-04-28 14:37:28 | 000,001,113 | ---- | C] () -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

[2012-04-24 04:47:59 | 000,000,834 | ---- | C] () -- E:\Users\Adam\.recently-used.xbel

[2012-04-23 11:05:52 | 000,000,830 | ---- | C] () -- E:\Windows\tasks\Adobe Flash Player Updater.job

[2012-04-10 11:43:52 | 004,406,172 | ---- | C] () -- E:\HappyWhels.zip

[2012-04-05 04:15:32 | 000,001,191 | ---- | C] () -- E:\Users\Adam\Application Data\Microsoft\Internet Explorer\Quick Launch\BearShare.lnk

[2012-03-30 09:26:03 | 000,002,414 | ---- | C] () -- E:\Users\Adam\AppData\Roaming\PStrip.bko

[2012-03-29 12:34:16 | 000,002,468 | ---- | C] () -- E:\Users\Adam\AppData\Roaming\PStrip.bk!

[2012-03-29 12:34:11 | 000,002,433 | ---- | C] () -- E:\Users\Adam\AppData\Roaming\PStrip.bak

[2012-03-29 09:54:50 | 000,002,433 | ---- | C] () -- E:\Users\Adam\AppData\Roaming\PStrip.ini

[2012-02-04 10:25:38 | 000,140,800 | ---- | C] () -- E:\Windows\System32\drivers\PnkBstrK.sys

[2012-02-04 10:25:04 | 000,283,304 | ---- | C] () -- E:\Windows\System32\PnkBstrB.exe

[2012-02-04 10:22:35 | 000,076,888 | ---- | C] () -- E:\Windows\System32\PnkBstrA.exe

[2012-01-27 19:16:07 | 000,200,468 | ---- | C] () -- E:\Windows\System32\drivers\RTAIODAT.DAT

[2012-01-06 04:53:11 | 000,001,746 | ---- | C] () -- E:\Windows\Language_trs.ini

[2011-12-27 00:00:27 | 000,138,056 | ---- | C] () -- E:\Users\Adam\AppData\Roaming\PnkBstrK.sys

[2011-10-15 01:54:52 | 000,321,856 | ---- | C] () -- E:\Windows\System32\nvStreaming.exe

[2011-10-07 19:04:38 | 000,156,605 | ---- | C] () -- E:\Windows\hpoins34.dat

[2011-10-04 15:44:54 | 000,000,000 | ---- | C] () -- E:\Users\Adam\AppData\Local\{4493DCF8-6225-4C8B-9A95-37FBAB9EDADE}

[2011-09-20 19:08:44 | 000,000,000 | ---- | C] () -- E:\Users\Adam\AppData\Local\{FD1C53B7-F3A0-419B-B594-BAE4A210EF6B}

[2011-09-20 19:05:39 | 000,000,000 | ---- | C] () -- E:\Users\Adam\AppData\Local\{12C19082-444C-4E70-B255-6462E5CEA2FF}

[2011-09-19 00:07:46 | 000,015,360 | ---- | C] () -- E:\Windows\System32\bdmjpeg.dll

[2011-09-19 00:07:32 | 000,058,368 | ---- | C] () -- E:\Windows\System32\bdmpegv.dll

[2011-09-07 22:24:07 | 000,000,556 | RHS- | C] () -- E:\ProgramData\ntuser.pol

[2011-09-01 15:47:56 | 000,444,283 | ---- | C] () -- E:\Program Files\Common Files\WinPcapNmap.exe

[2011-08-23 18:40:43 | 000,264,192 | RHS- | C] () -- E:\Users\Adam\AppData\Roaming\235656310616.exe

[2011-08-23 18:40:19 | 000,264,192 | RHS- | C] () -- E:\Users\Adam\AppData\Roaming\1561476831191.exe

[2011-08-20 01:14:30 | 000,057,344 | RHS- | C] ( ) -- E:\Users\Adam\AppData\Roaming\MSNMessengerAPI.dll

[2011-08-16 20:48:37 | 000,195,072 | RHS- | C] () -- E:\Users\Adam\AppData\Roaming\16585187827057.exe

[2011-08-16 16:06:37 | 000,606,208 | RHS- | C] () -- E:\Users\Adam\AppData\Roaming\13510292652722.exe

[2011-08-15 16:29:53 | 000,000,688 | RHS- | C] () -- E:\Users\Adam\AppData\Roaming\11598200920287.exe

[2011-06-21 13:32:44 | 000,066,048 | ---- | C] () -- E:\Windows\System32\PrintBrmUi.exe

[2011-06-16 12:13:34 | 000,000,690 | ---- | C] () -- E:\Windows\eReg.dat

[2011-06-05 11:03:18 | 002,434,856 | ---- | C] () -- E:\Windows\System32\pbsvc_bc2.exe

[2011-05-08 15:35:28 | 000,704,512 | ---- | C] () -- E:\Windows\System32\cohelper.dll

[2011-05-08 15:35:28 | 000,005,940 | ---- | C] () -- E:\Windows\System32\drivers\nvphy.bin

[2011-05-08 15:28:57 | 000,747,764 | ---- | C] () -- E:\Windows\System32\perfh015.dat

[2011-05-08 15:28:57 | 000,337,158 | ---- | C] () -- E:\Windows\System32\perfi015.dat

[2011-05-08 15:28:57 | 000,151,718 | ---- | C] () -- E:\Windows\System32\perfc015.dat

[2011-05-08 15:28:57 | 000,038,710 | ---- | C] () -- E:\Windows\System32\perfd015.dat

[2011-05-02 11:39:13 | 000,682,280 | ---- | C] () -- E:\Windows\System32\pbsvc.exe

[2011-04-26 00:06:28 | 000,000,056 | -H-- | C] () -- E:\ProgramData\ezsidmv.dat

[2011-04-25 09:52:30 | 000,007,168 | ---- | C] () -- E:\Users\Adam\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011-04-09 18:55:28 | 000,179,261 | ---- | C] () -- E:\Windows\System32\xlive.dll.cat

 

========== LOP Check ==========

 

[2012-05-04 02:28:32 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\.minecraft

[2012-02-04 14:38:19 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\.Nitrous

[2012-04-30 13:09:35 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\.techniclauncher

[2012-01-27 01:02:27 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\1-abc

[2011-08-15 18:39:42 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\AnvSoft

[2012-02-02 20:38:54 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\Ashampoo

[2012-02-17 16:00:10 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\BANDISOFT

[2012-04-29 02:33:25 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\BitTorrent

[2012-04-28 14:41:49 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\Blender Foundation

[2011-07-18 16:50:17 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\CrystalSpace

[2012-03-29 12:51:38 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\DAEMON Tools Lite

[2011-04-30 01:09:01 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\fizzy

[2011-08-23 21:58:23 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\fuck

[2012-02-14 14:35:08 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\Gadu-Gadu 10

[2012-04-24 04:47:59 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\gtk-2.0

[2011-10-29 19:10:52 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\Hive Cluster

[2012-02-02 18:08:37 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\IObit

[2011-09-10 18:21:51 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\LolClient

[2011-11-26 11:14:18 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\LucasArts

[2011-12-07 07:29:58 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\Mount&Blade Warband

[2011-08-05 15:01:39 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\Notepad++

[2011-05-14 11:50:39 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\OpenFM

[2011-04-28 03:04:43 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\Opera

[2011-12-27 01:09:03 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\Origin

[2011-10-02 17:16:21 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\Publish Providers

[2012-01-06 01:15:00 | 000,000,000 | RHSD | M] -- E:\Users\Adam\AppData\Roaming\Svchost

[2012-03-02 11:18:35 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\SystemRequirementsLab

[2012-05-04 01:53:55 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\TS3Client

[2012-04-27 06:44:54 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\TuneUp Software

[2012-03-04 04:58:20 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\TunkDesign Inc

[2012-02-04 06:54:46 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\Uniblue

[2012-05-01 03:04:21 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\uTorrent

[2011-09-01 15:48:21 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\VDownloader

[2011-07-12 11:58:01 | 000,000,000 | ---D | M] -- E:\Users\Adam\AppData\Roaming\wargaming.net

[2012-05-04 10:00:01 | 000,000,330 | ---- | M] () -- E:\Windows\Tasks\RegistryBooster.job

[2012-05-04 09:58:57 | 000,032,568 | ---- | M] () -- E:\Windows\Tasks\SCHEDLGU.TXT

 

========== Purity Check ==========

 

 

 

========== Alternate Data Streams ==========

 

@Alternate Data Stream - 119 bytes -> E:\ProgramData\TEMP:05EE1EEF

 

< End of report >

graphic.png

Opublikowano

ale masz syfu lol

[list]
[*][url="http://www.mpcforum.pl/topic/435586-tutreje-na-nostaleth/"]Mój tut rejestracji na Tajlandzkim nostale[/url]
[*][url="http://www.mpcforum.pl/topic/639995-tutwszystko-o-kartach-specjalisty/page__pid__4604876#entry4604876/"]Wszystko o kartach specialisty[/url]
[/list]

Opublikowano

Jak spoilery zrobić?

[spoiler]tu wklejasz code z raportem[/spoiler]

Wszyscy się chwalą, to i ja się pochwalę:

 

PC:
  CPU: 
Intel Core i7 6700K @ 4.5GHz
  COOLER: SilentiumPC Fortis 3 v2
  MOBO: MSI Z170A-G43 Plus
  RAM: 2x8GB HyperX Fury Black 2400MHz CL15
  GPU: Palit nVidia GeForce GTX1070 JetStream @ 2012MHz/4004MHz
  AUDIO: AIM SC808
  SSD: Goodram Iridium Pro 240GB
  HDD: Western Digital Caviar Blue 1TB 
  PSU: SilentiumPC Enduro FM1 550W
  CASE: SilentiumPC Pax M70 Pure Black v2
  OS: Windows 10 Pro 64bit

PERYFERIA:
  Monitor: 
Eizo EV2450
  Audio: Technics SA-AX540 + Altus 110 (modyfikowane) + Superlux HD681EVO + Brainwavz M1
  Klawiatura: SPC Gear GK530 RGB Kalih Brown
  Mysz: A4Tech Bloody Blazing A90
  Podkładka: A4Tech Bloody B-081 
  Gamepad: Microsoft Xbox One Wireless Controller + Asus BT400
  Drukarka: Brother MFC-7460DN
  Kamerka: Logitech C270

LAPTOP:
  Model: 
Lenovo ThinkPad X230
  CPU: Intel Core i5 3210M @ 2,5GHz
  GPU: Intel HD4000
  RAM: 2x4GB Samsung 1600MHz
  SSD: Samsung PM830 128GB
  SCREEN: 1366x768 IPS, matowy
  3G: Ericsson H5321 gw
  BATTERY: Lenovo 9 Cell Extended Life Battery 44++

 
Opublikowano

Jeśli Trojan, to nie ma co zwlekać, zrób formata :P Jeżeli nie wiesz jak, pisz na PW ;]

Daj Like'a ^^

Opublikowano

Jeśli Trojan, to nie ma co zwlekać, zrób formata :P Jeżeli nie wiesz jak, pisz na PW ;]

OMG..... Przecież napisałe problem rozwiązany usunołem go format o zbyt drastyczne rozwiązanie a nawet po formacie trojan by został

graphic.png

Zarchiwizowany

Ten temat przebywa obecnie w archiwum. Dodawanie nowych odpowiedzi zostało zablokowane.

×
×
  • Dodaj nową pozycję...